- Getting started
- Supported features by device type
- Managing BlackBerry Dynamics apps in BlackBerry UEM
- BlackBerry devices powered by Android
- Device management options
- Managing devices beyond smartphones, tablets, and laptops
- Managing wearable devices
- Managing Apple TV devices
- What is the BlackBerry UEM Client?
- What is BlackBerry UEM Self-Service?
- BlackBerry Enterprise Mobility Suite services
- Log in to BlackBerry UEM
- Administrators
- Steps to set up UEM administration
- Setting console login options
- Customizing the appearance of the consoles
- Create website bookmarks in the consoles
- Change the language for automated email messages
- Creating and managing administrator roles
- Create an administrator
- Change role membership for administrators
- Set the session timeout parameters
- Delete an administrator
- Using profiles, variables, and email templates
- Wi-Fi, VPN, BlackBerry Secure Connect Plus, and other work connections
- Steps to set up work connections for devices
- Best practice: Creating work connection profiles
- Setting up work Wi-Fi networks for devices
- Setting up work VPNs for devices
- Setting up proxy profiles for devices
- Using enterprise connectivity and BlackBerry Secure Connect Plus for connections to work resources
- Steps to enable BlackBerry Secure Connect Plus
- Server and device requirements
- Load balancing and high availability for BlackBerry Secure Connect Plus
- BlackBerry Secure Connect Plus and the BlackBerry Connectivity Node
- Enabling and configuring enterprise connectivity and BlackBerry Secure Connect Plus
- Create an enterprise connectivity profile
- Enable BlackBerry Secure Connect Plus
- Specify the DNS settings for the BlackBerry Connectivity app
- Optimize secure tunnel connections for Android devices that use BlackBerry Dynamics apps
- Direct BlackBerry 10 work space traffic through BlackBerry Secure Connect Plus when a Wi-Fi network is available
- Troubleshooting BlackBerry Secure Connect Plus
- Setting up network connections for BlackBerry Dynamics apps
- Using BlackBerry 2FA for secure connections to critical resources
- Setting up single sign-on authentication for devices
- Filtering web content on iOS devices
- Managing email and web domains for iOS devices
- Create an AirPrint profile
- Configuring AirPlay profiles for iOS devices
- Controlling network usage for work apps on iOS devices
- Email, calendar, and contacts
- Setting up work email for devices
- Using Exchange Gatekeeping
- Setting up CardDAV and CalDAV profiles for iOS and macOS devices
- Certificates
- Steps to use certificates
- Integrating BlackBerry UEM with your organization's PKI software
- Connect BlackBerry UEM to your organization’s Entrust software
- Connect BlackBerry UEM to your organization’s Entrust IdentityGuard server to use smart credentials
- Connect BlackBerry UEM to your organization's OpenTrust software
- Connect BlackBerry UEM to your organization’s BlackBerry Dynamics PKI Connector
- Connect BlackBerry UEM to your organization’s app-based PKI solution
- Providing client certificates to devices
- Sending certificates to devices using profiles
- Choosing profiles to send client certificates to devices
- Sending CA certificates to devices
- Using user credential profiles to send certificates to devices
- Create a user credential profile to manually upload certificates
- Create a user credential profile to connect to your organization's PKI software
- Create a user credential profile to use Entrust smart credentials on devices
- Create a user credential profile to connect to your BlackBerry Dynamics PKI connector
- Renew certificates that are enrolled through the BlackBerry Dynamics PKI connector
- Creating user credential profiles for app-based certificates
- Create a user credential profile to use certificates from the native keystore on Android devices
- Using SCEP to send client certificates to devices
- Sending the same client certificate to multiple devices
- Specify the certificate used by an app
- Device policies, standards, and compliance
- Steps to set up your organization's policies and standards for devices
- Managing devices with IT policies
- Controlling BlackBerry Dynamics on users devices
- Enforcing compliance rules for devices
- Configuring the Enterprise Management Agent
- Limiting devices to a single app
- Controlling the software releases that are installed on devices
- Displaying organization information on devices
- Using location services on devices
- Turning off notifications outside of work hours
- Managing iOS features using custom payload profiles
- Configure the layout of apps on supervised iOS devices
- Setting up Windows Information Protection for Windows 10 devices
- Apps
- Adding apps to the app list
- Adding public apps to the app list
- Add a BlackBerry 10 app to the app list
- Add an iOS app to the app list
- Add an Android app to the app list if BlackBerry UEM is not configured for Android Enterprise devices
- Add an Android app to the app list if BlackBerry UEM is configured for Android Enterprise devices
- Add a Windows 10 app to the app list
- Add public BlackBerry Dynamics apps to the app list
- Adding internal apps to the app list
- Steps to add internal apps to the app list
- Specify the shared network location for storing internal apps
- Add an internal app to the app list
- Add an internal BlackBerry Dynamics app entitlement
- Upload BlackBerry Dynamics app source files
- Host an internal app for devices with an Android work profile in Google Play using the .apk file
- Host an internal app for Android Enterprise devices in BlackBerry UEMusing a .json file
- Update an internal app
- Update an internal app for Android devices with a work profile in BlackBerry UEM using a .json file
- Adding or changing an app configuration
- Adding app shortcuts
- Adding public apps to the app list
- Preventing users from installing specific apps
- Managing apps on the app list
- Delete an app from the app list
- Change whether an app is required or optional
- Device notifications for new and updated apps
- App behavior on iOS devices
- App behavior on Android devices
- App behavior on Android Enterprise devices
- App behavior on Samsung KNOX devices
- App behavior on BlackBerry devices
- App behavior on Windows 10 devices
- Managing app groups
- View the status of apps and app groups assigned to user accounts
- View which apps are assigned to user groups
- Viewing and customizing the apps list
- Update the app list
- Update app permissions for Android Enterprise apps
- Accept app permissions for Android Enterprise apps
- Set runtime app permissions for Android work apps
- Managing BlackBerry Dynamics apps
- Managing apps protected by Microsoft Intune
- Managing Apple VPP accounts
- Rank app installation
- Viewing personal app lists
- Rating and reviewing apps
- Managing the Work Apps icon for iOS devices
- Managing notifications for apps on supervised iOS devices
- Set the organization name for BlackBerry World
- Managing apps on BlackBerry OS devices
- Preparing to distribute BlackBerry Java Applications
- Configuring application control policies
- Application control policies for unlisted applications
- Creating software configurations
- Install BlackBerry Java Applications on a BlackBerry OS device at a central computer
- View the users that have a BlackBerry Java Application installed on their BlackBerry OS devices
- Reconciliation rules for conflicting settings in software configurations
- Adding apps to the app list
- Users and groups
- Steps to create groups and user accounts
- Creating user roles
- Creating and managing user accounts
- Create a user account
- Creating user accounts from a .csv file
- View a user account
- Add notes to a user account
- Manage multiple user accounts at one time
- Send an email to users
- Send a BlackBerry UEM Self-Service password to multiple users
- Edit user account information
- Synchronize information for a directory user
- Remove services from a user
- Enable services for a user
- Delete a user account
- Add users to user groups
- Remove a user from a user group
- Change which user groups a user belongs to
- Assign a profile or IT policy to a user account
- Add a client certificate to a user account
- Change a client certificate for a user account
- Renew or remove a BlackBerry Dynamics certificate for a user account
- Add a client certificate to a user credential profile
- Change a client certificate for a user credential profile
- Assign an app to a user account
- Assign an app group to a user account
- Assign a BlackBerry OS IT policy, profile, or software configuration to a user account
- View the resolved BlackBerry OS IT policy rules that are assigned to a user account
- Creating and managing user groups
- Creating directory-linked groups
- Create a local group
- View a user group
- Change the name of a user group
- Delete a user group
- Add nested groups to a user group
- Remove nested groups from a user group
- Assign a profile or IT policy to a user group
- Assign an app to a user group
- Assign an app group to a user group
- Assign a BlackBerry OS IT policy, profile, or software configuration to a user group
- Creating and managing shared device groups
- Create a shared device group
- Activate a shared device
- View the check-out history for a user
- Edit the user membership for a shared device group
- Remove a device from a shared device group
- Delete a shared device group
- Assign an app to a shared device group
- Assign an IT policy or a profile to a shared device group
- Creating device groups
- Viewing and customizing the user list
- Device activation
- Steps to activate devices
- Requirements: Activation
- Managing activation passwords
- Specify the default settings for activation passwords
- Allowing users to activate multiple devices with different activation types
- Manually expire an activation password
- Set an activation password and send an activation email message
- Send an activation email to multiple users
- Allow users to set activation passwords in BlackBerry UEM Self-Service
- Turn on user registration with the BlackBerry Infrastructure
- Enable user notification when a device has been activated
- Supporting Android Enterprise activations
- Supporting Windows 10 activations
- Creating activation profiles
- Activation step-by-step for users
- Activate multiple devices using KNOX Mobile Enrollment
- Activate multiple devices using zero-touch enrollment for Android Enterprise devices
- Activating iOS devices that are enrolled in DEP
- Steps to activate devices that are enrolled in DEP
- Register iOS devices in DEP and assign them to the BlackBerry UEM server
- Assign an enrollment configuration to iOS devices
- Add an enrollment configuration
- Remove an enrollment configuration that is assigned to iOS devices
- Delete an enrollment configuration
- Change the settings for an enrollment configuration
- View the settings for an enrollment configuration that is assigned to a device
- View user details for an activated device
- Activating iOS devices using Apple Configurator 2
- Using Activation Lock on iOS devices
- Restricting unsupervised iOS devices
- Activating BlackBerry 10 devices using the BlackBerry Wired Activation Tool
- Tips for troubleshooting device activation
- Device activation can't be completed because the server is out of licenses. For assistance, contact your administrator.
- Please check your username and password and try again
- Profile failed to install. The certificate "AutoMDMCert.pfx" could not be imported.
- Error 3007: Server is not available
- Unable to contact server, please check connectivity or server address
- iOS or macOS device activations fail with an invalid APNs certificate
- Users are not receiving the activation email
- Device commands and controls
- Sending commands to users and devices
- Deactivating devices
- Locate a device
- View available updates for iOS devices
- Update the OS on supervised iOS devices
- Creating device support messages
- Allowing BlackBerry 10 users to back up device data
- Maintenance, monitoring, and reporting
- Using log files
- Auditing events in BlackBerry UEM
- Creating event notifications
- Manage BlackBerry Dynamics jobs
- Using SNMP to monitor BlackBerry UEM
- Using dashboard reports
- Logging phone call and SMS/MMS activity for Android Enterprise and Samsung KNOX Workspace devices
- View and save a device report
- Exporting app deployment reports
- Activity and compliance violation reports for BlackBerry Dynamics apps
- Monitoring the performance of the BlackBerry Work app
- Profile settings
- Email profile settings
- IMAP/POP3 email profile settings
- Wi-Fi profile settings
- VPN profile settings
- SCEP profile settings
- Compliance profile settings
- BlackBerry Dynamics profile settings
- BlackBerry Dynamics connectivity profile settings
- Enterprise connectivity profile settings
- Enterprise Management Agent profile settings
- Windows Information Protection profile settings
- Microsoft Intune app protection profile settings
- Policy reference spreadsheet
- BlackBerry Docs
- BlackBerry UEM 12.10
- BlackBerry UEM Administration
- Getting started
- Supported features by device type
Supported features by device type
This quick reference compares the supported capabilities of
BlackBerry 10
, BlackBerry
OS (version 5.0 to 7.1), iOS
, macOS
, Android
, and Windows
devices in BlackBerry UEM
.Support for
BlackBerry
OS devices requires an upgrade from BES5
to BlackBerry UEM
.For more information about supported OS versions, see the Compatibility matrix.
Device features
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Wireless activation | √ | √ | √ | √ | √ | √ |
Wireless activation using a QR code | √ | √ | ||||
Wired activation using the BlackBerry Wired Activation Tool | √ | |||||
Client app required for activation | √ 1 | √ | ||||
Customize terms of use agreement for activation | √ | √ | √ | √ | √ 2 | |
Restrict activation by device model | √ | √ | √ | √ | √ 3 | |
View and export device report (for example, hardware details) | √ | √ | √ | √ | √ | √ |
Restrict unsupervised devices | √ 4 | √ 4 |
1
For iOS
devices enrolled in DEP, client app must be assigned to users or groups.2
For Windows 10
devices only.3
For Windows 10
Mobile
devices only.4
For devices activated with MDM controls or User privacy
with SIM-based licensing only.Security features
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Separation of work and personal data | √ | √ | √ 1 | √ 2 | √ 4 | |
User privacy for personal data | √ | √ | √ 1 | √ 2 | ||
Encryption of work data at rest | √ | √ | √ 1 | √ 2 | √ 4 | |
Protection of devices by sending IT commands | √ | √ | √ | √ | √ | √ |
Control of device capabilities using IT policies | √ | √ | √ | √ | √ | √ |
Delete work data after period of inactivity | √ | √ 1 | √ 1 | |||
Enforce password requirements | √ | √ | √ | √ | √ | √ |
Enforce encryption of media card | √ | √ | √ 3 | |||
Enforce encryption of internal storage | √ | √ | √ | √ |
1
Requires BlackBerry
Dynamics
apps.2
Requires Samsung KNOX Workspace
, Android Enterprise
, or BlackBerry
Dynamics
apps.3
For Samsung KNOX
devices only.4
For Windows 10
devices only.Sending certificates to devices
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
CA certificate profiles | √ | √ | √ | √ | √ | |
SCEP profiles | √ | √ | √ | √ | √ 1 | |
Shared certificate profiles | √ | √ | √ | |||
User credential profiles | √ | √ | √ | √ |
1
For Windows 10
devices only.Managing work connections for devices
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
BlackBerry 2FA profiles | √ | √ | √ | |||
BlackBerry
Dynamics connectivity profiles | √ | √ | √ | √ | ||
CalDAV profiles | √ | √ | ||||
CardDAV profiles | √ | √ | ||||
Certificate retrieval profiles | √ | |||||
Enterprise connectivity | √ | |||||
BlackBerry Secure Connect Plus | √ | √ 1 | √ 2 | |||
Exchange ActiveSync email profiles | √ | √ | √ | √ 3 | √ | |
BlackBerry Secure Gateway | √ | |||||
IMAP/POP3 email profiles | √ | √ | √ | √ | ||
Proxy profiles | √ | √ | √ | √ | √ 4 | |
Single sign-on profiles | √ | √ | ||||
VPN profiles | √ | √ | √ | √ | √ 5 | √ 6 |
Wi-Fi profiles | √ | √ | √ | √ | √ | √ |
Other OS-specific profiles | CRL profiles OCSP profiles | CRL profiles 7 | Windows Information Protection profiles 7 |
1
Only for devices running iOS
9.0 and later.2
Only for Android Enterprise
devices and KNOX Workspace
devices.3
Only for Motorola
devices that support the EDM API, Android Enterprise
devices, and KNOX
devices.4
Only for Windows 10
devices (configure proxy settings in VPN profiles) and Windows 10
Mobile
devices (configure proxy settings in Wi-Fi
profiles).5
For KNOX Workspace
devices only.6
For Windows 10
devices only.7
Only for BlackBerry
devices powered by Android
with Android
7.0 and later.Managing your organization’s standards for devices
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Activation profiles | √ | √ | √ | √ | √ | |
App lock mode profiles | √ 1 | √ 1 | √ 1 | |||
BlackBerry
Dynamics profiles | √ | √ | √ | √ | ||
BlackBerry
Dynamics compliance profiles 2 | √ | √ | √ | √ | ||
Compliance profiles | √ | √ | √ | |||
Device profiles | √ | √ | √ | √ 3 | ||
Enterprise Management Agent profiles | √ | √ | √ | √ | ||
Location service profiles | √ | √ | √ 4 | |||
Other OS-specific profiles | Device SR requirements profiles | Access control rules Software configuration | AirPlay profilesAirPrint profilesCustom payload profiles Managed domains profiles Network usage profiles Per-app notification profiles 5 Web content filter profiles |
1
Only for supervised iOS
devices, KNOX
devices that are activated with MDM controls
, Windows 10
Education, and Windows 10
Enterprise devices.2
If your environment includes both Good Control
and BlackBerry UEM
, after you upgrade and synchronize Good Control
with BlackBerry UEM
, existing compliance profiles in Good Control
are imported to BlackBerry UEM
as BlackBerry
Dynamics
compliance profiles that contain the Good Control
compliance settings.4
For Windows 10
devices only.5
For Windows 10
Mobile
devices only.6
Only for supervised iOS
devices running iOS
9.3 and later.Protecting lost or stolen devices
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Specify device password | √ | √ | √ | √ 1 | ||
Lock device | √ | √ | √ | √ | √ | √ 1 |
Activation lock | √ 2 | |||||
Specify work space password and lock | √ 3 | |||||
Unlock device and clear password | √ | √ | ||||
Delete all device data | √ | √ | √ | √ | √ 4 | √ |
Delete only work data | √ | √ | √ | √ | √ | √ |
1
For Windows 10
Mobile
devices only.2
Only for devices running iOS
7.0 and later.3
Only for Android Enterprise
devices running Android
7.0 and later.4
For Motorola
devices that support the EDM API, information on the media card is also deleted. For KNOX Workspace
devices, you can choose to delete information on the media card.Configuring roaming
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Disable automatic synchronization when roaming | √ 1 | √ | √ 2 | |||
Disable data when roaming | √ | √ 3 | √ 4 | √ |
1
For synchronization with the mail server only.2
For KNOX
devices only.3
For devices running iOS
9.0 or later, you can configure data roaming settings in a network usage profile.4
For Android Enterprise
and KNOX
devices only.Managing apps
Feature | BlackBerry 10 | BlackBerry OS | iOS | macOS | Android | Windows |
|---|---|---|---|---|---|---|
Distribute public apps from storefront ( BlackBerry World , App Store , Google
Play , Windows Store ) | √ | √ | √ | √ | ||
Manage work app catalog | √ | √ | √ | √ | √ | |
Brand work app catalog | √ | √ | ||||
Manage restricted apps | √ | √ 1 | √ 1 | |||
Distribute internal apps | √ | √ | √ | √ | √ | |
Add app shortcuts to devices | √ | √ | √ |
1
The restricted app list is not required for Android Enterprise
, KNOX Workspace
, or Windows 10
devices because only apps that an administrator assigns can be installed in the work space or on devices.