Getting started
- Configuring BlackBerry UEM for the first time
- Configuration tasks for managing BlackBerry OS devices
- Administrator permissions you need to configure BlackBerry UEM
- Obtaining and activating licenses
- BlackBerry Enterprise Mobility Suite services
Changing BlackBerry UEM certificates
- Considerations for changing BlackBerry Dynamics certificates
- Change a BlackBerry UEM certificate
Configuring BlackBerry UEM to send data through a proxy server
- Sending data through a TCP proxy server to the BlackBerry Infrastructure
- Sending data through the BlackBerry Router to the BlackBerry Infrastructure
  - Configure BlackBerry UEM to use the BlackBerry Router
- Sending data through an HTTP proxy to the BlackBerry Dynamics NOC
  - Configure HTTP proxy settings
Configuring connections through internal proxy servers
- Configure server-side proxy settings
Connecting to your company directories
- Configuring Microsoft Active Directory authentication in an environment that includes a resource forest
- Connect to a Microsoft Active Directory instance
- Connect to an LDAP directory
- Enable directory-linked groups
- Enabling onboarding
  - Enable and configure onboarding and offboarding
- Synchronize a company directory connection
Connecting to an SMTP server to send email notifications
- Connect to an SMTP server to send email notifications
Configuring single sign-on for BlackBerry UEM
- Configure constrained delegation for the Microsoft Active Directory account to support single sign-on
- Configure single sign-on for BlackBerry UEM
  - Console URLs for single sign-on
  - Browser requirements: Single sign-on
Obtaining an APNs certificate to manage iOS and macOS devices
- Obtain a signed CSR from BlackBerry
- Request an APNs certificate from Apple
- Register the APNs certificate
- Renew the APNs certificate
- Troubleshooting APNs
Controlling which devices can access Exchange ActiveSync
- Steps to configure Exchange ActiveSync and the BlackBerry Gatekeeping Service
- Configure permissions for gatekeeping
- Allow only authorized devices to access Exchange ActiveSync
  - Configure Microsoft Exchange to allow only authorized devices to access Exchange ActiveSync
  - Configure the mobile device access policy in Microsoft Office 365
- Configure Microsoft IIS permissions for gatekeeping
- Create a gatekeeping configuration
Connecting BlackBerry UEM to Microsoft Azure
- Create a Microsoft Azure account
- Synchronize Microsoft Active Directory with Microsoft Azure
- Create an enterprise endpoint in Azure
- Configuring BlackBerry UEM to synchronize with Microsoft Intune
  - Configure BlackBerry UEM to synchronize with Microsoft Intune
- Configuring BlackBerry UEM to synchronize with the Windows Store for Business
Configuring BlackBerry UEM to support Android Enterprise devices
- Configure BlackBerry UEM to support Android Enterprise devices
- Remove the connection to your Google domain
- Remove the Google domain connection using your Google account
- Edit or test the Google domain connection
Add an E-FOTA license
Manage attestation for Samsung KNOX devices
Manage attestation for Android devices and BlackBerry Dynamics apps using SafetyNet
- Considerations for configuring SafetyNet attestation
- Considerations for configuring SafetyNet attestation - App versions
- Configure attestation for Android devices and BlackBerry Dynamics apps using SafetyNet
Manage attestation for Windows 10 devices
Configuring BlackBerry UEM for DEP
- Create a DEP account
- Download a public key
- Generate a server token
- Register the server token with BlackBerry UEM
- Add the first enrollment configuration
- Update the server token
- Remove a DEP connection
Setting up BlackBerry UEM Self-Service for users
- Set up BlackBerry UEM Self-Service
Configuring high availability for a BlackBerry UEM domain
- High availability for the components that manage BlackBerry OS devices
- Architecture: High availability for BlackBerry UEM
- Load-balancing data for BlackBerry 10 devices
- High availability and the BlackBerry Connectivity Node
- How BlackBerry UEM evaluates the health of components
- Install an additional BlackBerry UEM instance
- Configuring high availability for the management console
Configuring database high availability using database mirroring
- Database high availability for components that manage BlackBerry OS devices
- Steps to configure database mirroring
- System requirements: Database mirroring
- Prerequisites: Configuring database mirroring
- Create and configure the mirror database
- Connect BlackBerry UEM to the mirror database
- Configuring a new mirror database
Configuring TLS/SSL connections to Exchange ActiveSync when you enable the BlackBerry Secure Gateway
- Configure BlackBerry UEM to trust the Exchange ActiveSync server certificate
- Configure BlackBerry UEM to use the TLS versions and ciphers that Exchange ActiveSync supports
Simplifying Windows 10 activations
- Deploy a discovery service to simplify Windows 10 activations
Migrating users, devices, groups, and other data from a source server
- Prerequisites: Migrating users, devices, groups, and other data from a source server
- Connect to a source server
  - Export the self-signed root certificate for the Good Control server
- Considerations: Migrating IT policies, profiles, and groups from a source server
- Migrate IT policies, profiles, and groups from a source server
- Complete policy and profile migration from Good Control to BlackBerry UEM
  - Good Control features in BlackBerry UEM
- Considerations: Migrating users from a source server
- Migrate users from a source server
- Considerations: Migrating devices from a source server
  - Device migration quick reference
- Migrate devices from a source server
- Migrating DEP devices
  - Migrate DEP devices that have the BlackBerry UEM Client installed
  - Migrate DEP devices that do not have the BlackBerry UEM Client installed
Configuring BlackBerry UEM to support BlackBerry Dynamics apps
- Manage BlackBerry Proxy clusters
- Configure Direct Connect or a web proxy for BlackBerry Proxy connections
- Configure BlackBerry Dynamics properties
- Configure communication settings for BlackBerry Dynamics apps
- Configuring certificates for BlackBerry Dynamics apps
  - Configure a time to live for client certificates
  - Configuring PKI connections for BlackBerry Dynamics apps
    - PKI connector interactions
Integrating BlackBerry UEM with Cisco ISE
- Requirements: Integrating BlackBerry UEM with Cisco ISE
- Create an administrator account that Cisco ISE can use
- Add the BlackBerry Web Services certificate to the Cisco ISE certificate store
- Connect BlackBerry UEM to Cisco ISE
- Example: Authorization policy rules for BlackBerry UEM
- Managing network access and device controls using Cisco ISE
  - Redirecting devices that are not activated on BlackBerry UEM
Monitoring BlackBerry UEM using SNMP tools
- Supported SNMP operations
- System requirements: SNMP monitoring
- MIBs for BlackBerry UEM
- Compile the MIB and configure the SNMP management tool
- Using SNMP to monitor components
  - Configure SNMP to monitor components

Considerations for changing
BlackBerry Dynamics
certificates

If you want to change any of the

BlackBerry Dynamics

SSL certificates, keep the following considerations in mind. If problems occur when you change a certificate, communication between

BlackBerry UEM

components and between

BlackBerry UEM

and

BlackBerry Dynamics

apps could be disrupted. Plan and test certificate changes carefully.

Add new certificates to any peripheral equipment

If you have added any

BlackBerry Dynamics

certificates to peripheral equipment on your network, add the new certificate to peripheral equipment before adding it to

BlackBerry UEM

Update
BlackBerry Dynamics
apps

If you are replacing the

BlackBerry Dynamics

certificate for application management or

Direct Connect

, ensure that users'

BlackBerry Dynamics

apps are updated to the most recent versions before you replace the certificate.

Any

BlackBerry Dynamics

apps developed by your organization must be built with version 3.2 or later of the

BlackBerry Dynamics

SDK. Older apps can't receive the new certificate from

BlackBerry UEM

BlackBerry Dynamics
apps must be open to receive a certificate

Users must open a

BlackBerry Dynamics

app for the app to receive a certificate from

BlackBerry UEM

. If you are replacing the

BlackBerry Dynamics

certificate for application management or

Direct Connect

and the change becomes effective before

BlackBerry UEM

pushes the certificate to all

BlackBerry Dynamics

apps, any apps that did not receive the certificate must be reactivated. Apps do not receive certificates while they are suspended on

iOS

devices or while

Android

devices are in Doze mode.

Ensure the
BlackBerry Connectivity Node
is accessible

If any

BlackBerry Proxy

instances are unreachable by

BlackBerry UEM

when

BlackBerry Dynamics

certificates are replaced,

BlackBerry Dynamics

apps will not be able to connect to those instances following the certificate replacement.

Schedule certificate changes appropriately

If you are replacing the certificate for

BlackBerry Dynamics

servers, choose a period of low activity to restart the servers.

Allow sufficient time for new certificates to propagate to

BlackBerry Proxy

and

BlackBerry Dynamics

apps. If you are replacing only the certificate for

BlackBerry Dynamics

servers, allow at least 10 minutes before the server restarts.

If you are replacing the

BlackBerry Dynamics

certificate for application management or

Direct Connect

, it is recommended that the time until the effective date be longer than the Connectivity verification "Last contact time" setting in the compliance profile.

If you are replacing both the

BlackBerry Dynamics

certificates for application management and

Direct Connect

, set the effective times at least 30 minutes apart. If you have a large number of users and

BlackBerry Dynamics

apps, you should wait longer than 30 minutes between each certificate.

Section:

Changing BlackBerry UEM certificates

Considerations for changing BlackBerry Dynamics certificates

Add new certificates to any peripheral equipment

Update BlackBerry Dynamics apps

BlackBerry Dynamics apps must be open to receive a certificate

Ensure the BlackBerry Connectivity Node is accessible

Schedule certificate changes appropriately

Considerations for changing
BlackBerry Dynamics
certificates

Update
BlackBerry Dynamics
apps

BlackBerry Dynamics
apps must be open to receive a certificate

Ensure the
BlackBerry Connectivity Node
is accessible