Skip Navigation

Change a 
BlackBerry UEM
 certificate

  • Obtain a certificate signed by a trusted CA. The certificate must be in a keystore format (.pfx, .pkcs12).
  • If you are replacing the 
    BlackBerry Dynamics
     certificate for application management or 
    Direct Connect
    , ensure that users' 
    BlackBerry Dynamics
     apps are updated to the most recent versions first.
  1. On the menu bar, click 
    Settings > Infrastructure > Server certificates
    .
  2. In the section for the certificate that you want to replace, click 
    View details
    .
  3. Click 
    Replace certificate
    .
  4. Browse to the certificate file and select it.
  5. Enter an encryption password for the certificate.
  6. If you are replacing the certificate for 
    BlackBerry Dynamics
     servers, specify when you want 
    BlackBerry UEM
     to restart to make the change effective.
    It is recommended that you choose a period of low activity to restart the servers.
  7. If you are replacing the 
    BlackBerry Dynamics
     certificate for application management or 
    Direct Connect
    , specify the effective date for the certificate change.
    It is recommended that the effective date be further away than the Connectivity verification "Last contact time" setting in the compliance profile. If you are changing more than one certificate, you should separate the effective times by at least 30 minutes.
  8. Click 
    Replace
    .
  • If you replaced any of the certificates on the 
    Server certificates
     tab, restart the 
    BlackBerry UEM Core
     service on all servers. It is recommended that you choose a period of low activity to restart the servers.
  • For certificates on the 
    BlackBerry Dynamics
     certificates tab, you can click 
    Revert to default
     to switch back to using a self-signed certificate.
  • On the 
    BlackBerry Dynamics
     certificates tab, you can clear the 
    Trust BlackBerry UEM CA
     and 
    Trust BlackBerry Dynamics CA
     check boxes if you have no further need to trust the self-signed certificates. You can clear the 
    Trust BlackBerry Dynamics CA
     check box only if you have replaced all of the certificates on the 
    BlackBerry Dynamics
     certificates tab.
  • If 
    BlackBerry Dynamics
     apps stop communicating after you change the certificates, ensure that the apps are up to date and then instruct users to reactivate the apps.