What's new in BlackBerry UEM 12.10

Specify if a user can place outgoing calls. If this rule is not selected, the device can only make emergency calls. All other outgoing calls are blocked.

Specify whether the device synchronizes logs for SMS text messages and MMS messages with your EMM server.

Specify whether the device synchronizes the call log for the Phone app with your EMM server.

Specify whether a device can use NFC.

Specify if a device can update its OS using a Firmware Over-The-Air (FOTA) client (for example, 

Samsung KNOX

 EMM or WebSync DM). If this rule is not selected, all wireless update requests (user-initiated, server-initiated, and system-initiated) are blocked. The user may see messages related to new OS updates but any attempt to update the OS fails.

Specify whether a device can make 

Wi-Fi

 connections. After you deselect this rule and then reselect it, the device cannot use 

Wi-Fi

 until it is restarted.

Specify if a device can use 

Wi-Fi

 Direct. When this rule is selected, the device can make connections using 

Wi-Fi

 Direct. This rule also affects the S Beam feature on 

Samsung

 devices.

Specify if a device can share its mobile network connection with other devices using 

Bluetooth

. If this rule is not selected, the user cannot change this setting on the device.

Specify if a device can share its mobile network connection with other devices using 

Bluetooth

. If this rule is not selected, the user cannot change this setting on the device.

Specify if a device can share its mobile network connection with other devices using USB. If this rule is not selected, the user cannot change this setting on the device.

Specify if a device can share its mobile network connection with other devices using 

Wi-Fi

. If this rule is not selected, the user cannot change this setting on the device.

Specify if a user can update the operating system of a device using download mode.

Specify if a device must encrypt all data on the external SD card. This rule requires the value of the "Password requirements" rule to be at least "Alphanumeric."

Specify if apps must check for revoked certificates in the server certificate chain when opening SSL connections in 

KNOX Workspace

.  This rule applies only to apps that use the standard 

Java

 SSL sockets and TrustManager implementation (including most native apps), but does not apply to third-party browsers. The certificate revocation check uses CRLs from the CRL distribution point listed in the certificates. If the "Require OCSP check" rule is selected, apps first check for certificate revocation using OCSP. If OCSP fails, then apps check the CRLs.

Specify if apps must use OCSP before using CRLs to check for revoked certificates when opening SSL connections in 

KNOX Workspace

. The OCSP check uses the OCSP response server in the "Authority Information Access" extension in the certificate.

Specify whether the device validates certificates installed by end users. If one of the validation checks (for example, certification path, expiration date, or revocation status) fails, the device blocks the installation of the certificate.

Specify whether a work app can display the "Share via" list to allow a user to share content across work apps in the Workspace.

Specify whether a device can record audio. If this rule is not selected, the user can still make calls and use audio streaming using the device microphone. This rule applies to phone calls, voice recognition, and VoIP. If an app declares a use type and does something else, then this rule cannot block the app. If you deselect this rule, any ongoing audio recording is interrupted. Video recording is still allowed if no audio recording is attempted. This rule applies to the Workspace only.

Specify if 

Google

 accounts and apps can sync automatically. This rule does not block 

Google Play

from updating installed apps. Users can still manually sync from some apps, including Gmail.

Specify if a device can record video. If this rule is not selected, the camera is still available so that a user can take pictures and use video streaming. If you deselect this rule, any ongoing video recording is interrupted.

Specify whether the native Android browser prevents the browser from running 

JavaScript

 code for a website. If this rule is not selected, a website that requires 

JavaScript

 to be active to execute a function (for example, an animation) cannot execute the function. If this rule is not selected, a user cannot change the setting on the device.

Specify whether the user can use fingerprint authentication for the 

KNOX Workspace

.

Specify whether a user can authenticate with the work space using an iris scan.

Specify whether the Workspace password is visible when a user is typing it. If this rule is not selected, users and apps cannot change the visibility setting.

Specify whether users can add contacts from managed apps to unmanaged contacts accounts.

Specify whether unmanaged apps can read contacts from managed contacts accounts.

Specify whether apps can access device diagnostic information about other apps by default. If you select "User controlled," the user can choose whether to allow access. If you select "Allow," apps can access diagnostic information. If you select "Disallow," apps can't access diagnostic information.

Specify the list of apps that are always allowed to access device diagnostic information. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default app access to diagnostic information" rule.

Specify the list of apps that are never allowed to access device diagnostic information. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default app access to diagnostic information" rule.

Specify the list of apps that users can choose to allow to access device diagnostic information. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default app access to diagnostic information" rule.

Specify whether apps can run in background by default. If you select "User controlled," the user can choose whether to allow access. If you select "Allow," apps can run in background. If you select "Disallow," apps can't run in background.

Specify the list of apps that are always allowed to run in background. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default apps can run in background" rule.

Specify the list of apps that are never allowed to run in background. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default apps can run in background" rule.

Specify the list of apps that users can choose to allow to run in background. Specify apps using package family names, separated by semi-colons (;). Apps specified in this rule ignore the setting in the "Default apps can run in background" rule.