Skip Navigation

Configuring TLS/SSL connections to 
Exchange ActiveSync
 when you enable the 
BlackBerry Secure Gateway

If you enable the 
BlackBerry Secure Gateway
 to provide a secure connection through 
BlackBerry UEM
 between your organization's mail server and 
iOS
 devices with the 
MDM controls
 activation type, you may need to configure 
BlackBerry UEM
 to make TLS/SSL connections to 
Exchange ActiveSync
. For more information about enabling the 
BlackBerry Secure Gateway
, see "Protecting email data using the 
BlackBerry Secure Gateway
" in the Administration content
.
If your 
Exchange ActiveSync
 server is configured to require a TLS connection, you must add the 
Exchange ActiveSync
 server certificate (or its root certificate) to 
BlackBerry UEM
. The 
BlackBerry Secure Gateway
 requires the certificate to trust the 
Exchange ActiveSync
 server when it establishes the TLS/SSL connection.
Depending on the security requirements of your 
Exchange ActiveSync
 server, you may also need to update the list of TLS versions and ciphers that the 
BlackBerry Secure Gateway
 can use for authentication with 
Exchange ActiveSync
.

Configure
BlackBerry UEM
to trust the
Exchange ActiveSync
server certificate

Export the certificate from the
Exchange ActiveSync
server in X.509 format (*.cer, *.der) and store it in a network location that you can access from the management console.
  1. On the menu bar, click
    Settings > External Integration > Trusted certificates
    .
  2. Click The Add icon beside
    Exchange ActiveSync server trusts
    .
  3. Click
    Browse
    .
  4. Select the certificate file that you want to use.
  5. Click
    Open
    .
  6. Type a description for the certificate.
  7. Click
    Add
    .

Configure
BlackBerry UEM
to use the TLS versions and ciphers that
Exchange ActiveSync
supports

  1. On the menu bar, click
    Settings > External Integration > BlackBerry Secure Gateway
    .
  2. Click The Add icon in the table that you want to change.
  3. Click the TLS version or cipher that you want to add or remove from the
    Selected
    list.
  4. Click the arrow to move the item to the desired list.
  5. Click
    Assign
    .