Known issues in BlackBerry UEM 12.10 MR1
BlackBerry UEM
12.10 MR1Items marked with an asterisk (*) are new for this release.
Deprecation of the MDM Controls activation type
Google is deprecating the MDM Controls activation type in an upcoming release of the Android operating system. For more information, visit support.blackberry.com/community to read KB48386. |
Installation, upgrade, and migration known issues
* When you install BlackBerry UEM , if you use a folder with a name that contains special characters, the BlackBerry UEM services are not installed. (JI 2685876)Workaround : Do not install BlackBerry UEM in a folder that contains special characters. |
The BlackBerry 2FA installer might not restart services after an upgrade is complete. (JI 2638109) Workaround : Manually start the services. |
The BlackBerry Router installation log files are not moved to the deployment folder after installation is complete. (JI 2634654)Workaround : You can find the log files in the temp folder. |
You cannot install a BlackBerry Router if you specify a service account name and password in the deployer.properties file. (JI 2634648)Workaround : Leave the username and password fields empty. |
Some app configurations might not migrate from Good Control to BlackBerry UEM . (JI 2521111) |
When you are migrating apps from Good Control to BlackBerry UEM , if you have not configured a policy that contains an authentication delegate in Good Control but BlackBerry UEM has a policy that configures app A as an authentication delegate, when you migrate app B, the app is blocked from migrating because app A has not been migrated. If you then migrate app A, app B will still be blocked because it does not send a request to app A to see if it has been migrated. (JI 2507114)Workaround : On the device, force the apps to stop and then restart app B. |
User and device management known issues
Note that some of these issues are for the
BlackBerry UEM Client
and will be fixed in a future BlackBerry UEM Client
release.* Entrust certificates do not enroll if they are missing default RDN values. (JI 2675515)Workaround : Use the default RDN values. |
* If a BlackBerry
Dynamics app uses app-based client certificates from the BlackBerry UEM Client , and a user tries to open and activate the app before the BlackBerry UEM Client has been provisioned for BlackBerry
Dynamics , the BlackBerry UEM Client is locked. (JI 2662162)Workaround : Provision the certificate provider app (BlackBerry UEM Client or Entrust Smart Card credentials) before you provision BlackBerry
Dynamics apps that use app-based client certificates. |
* Certificates from a two-key pair Entrust profile can't be installed on an iOS device. (JI 2662697) |
When a user activates an iOS device and sets their own activation password, they might receive an unnecessary email about activating BlackBerry
Dynamics apps. (JI 2635013) |
On an Android 9 device, if the Prevent Screen Capture security policy setting is disabled, the user can cut/copy/share data from a BlackBerry
Dynamics app to a non-BlackBerry
Dynamics app, even when data leakage prevention (DLP) is enabled via Pixel Launcher functionality. To ensure no data leakage, it is recommended that you enable the Prevent Screen Capture policy setting. (JI 2598556) |
You can't use the Purebred app and Entrust smart credentials at the same time on iOS devices with BlackBerry
Dynamics . If you do, the Purebred certificate is imported on the incorrect user credential profile. (JI 2585322) |
If your organization uses PKI and Entrust smart credentials together, users might need to enroll the PKI certificate multiple times on the same device (maximum of once per app). (JI 2580228) |
If your organization is using Entrust smart credentials on iOS , if you deactivate a device, the certificates still display as being imported on the Profiles screen. (JI 2569249) |
After an iOS user imports a certificate, the user is taken through the import process again. (JI 2538500) |
When you use a Work space only activation type to activate an Android 8.0 device and you configure a Wi-Fi profile in BlackBerry UEM , the device user might not be able to connect to a Wi-Fi network. (JI 2371987)Workaround : In your organization's IT policy, select the “Allow changing Wi-Fi settings" option. Note that this issue is fixed in Android 8.1. |
When you use a Samsung KNOX activation profile to activate an Android device and you select the "Google
Play app management for Samsung KNOX Workspace devices" option, the device will not activate and a Google
Play services error will display. For more information, visit http://support.blackberry.com/kb/ to read article KB469178. (JI 2343363) |
On a Samsung KNOX device, required BlackBerry UEM hosted apps might not display in the "Installed" section when the user opens Google
Play on the device, even if they are actually installed. (JI 2251895) |
If a user deletes BlackBerry Access from their device, and then generate access keys for another user in BlackBerry UEM Self-Service , if the user uses those keys when re-installing BlackBerry Access on their device, you can't assign any app configurations to the user's device. (JI 2237117) |
You cannot re-activate a macOS device if you remove the activation profile on the device. (JI 2226652) |
The BlackBerry UEM Client is not automatically updated for devices that use an Apple VPP account when the VPP account setting "Automatically update the app when a new version is available" is enabled in BlackBerry UEM . (JI 2197631) |
Management console known issues
In a BlackBerry UEM and BES5 integrated environment, if you delete a BlackBerry OS user from the BlackBerry Administration Service without selecting the "Delete the user and remove the BlackBerry information from the user’s mail system" option, and then you add the same user to BlackBerry UEM and activate a BlackBerry OS device for the user, the BlackBerry OS device information does not display in the BlackBerry UEM management console. |
* When you create a user group, if you add an app to the group and click Save, an error message displays. (JI 2677208) Workaround : Create the user group and save it, and then edit the group to add the apps. |
* When you create a compliance profile for Android devices, if you select the 'Restricted device model' option you can save the profile without selecting an 'Allowed device model'. (JI 2668668) |
* Some of your organization's iOS VPP apps do not display on the Apps page. (JI 2667453) Workaround : Generate a new .vpp token file and edit your Apple VPP account information at Apps > iOS App licenses. |
On the Users > Apple DEP devices page, if you select the top checkbox to select all of the devices in the list, only the devices that are visible on the screen are selected. (JI 2646995) |
If you open the BlackBerry Connect app, click on an app configuration, click the Server Configuration tab, remove the information in the Connect Server Hosts field and click Save, when you click on the app configuration again, the information still displays. (JI 2646430) |
If you add an iOS and Android version of an app and both apps have the same name, only one of the apps displays on the App rankings page. (JI 2645646) |
When you try to assign an OTP token to an LDAP user, an error message displays. (JI 2642308) |
On the App groups page, if you click the number in the Applied users column, only the first user displays. (JI 2641005) Workaround : To view all of the users, after you click the number in the Applied users column, click the Assigned to users tab. |
Future licenses do not display a start date or expiration date on the Licensing Summary screen. (JI 2636721) |
If you assign the “First” BlackBerry Cluster to the default BlackBerry Connectivity profile, and you navigate to Settings > BlackBerry
Dynamics > Clusters, create an empty “Second” cluster, and reassign the server that is associated with the First cluster to the second cluster and click Save, an error message displays. The Enabled for activation option also is cleared for the First cluster. (JI 2635165)Workaround : Re-select the 'Enabled for activation' option. |
When you click the Renew button twice on the user credential profile page, an error message displays. (JI 2633794) |
When you create a certificate mapping profile, if you select the Specified apps option, click +, search for apps, select multiple apps that the search returned and click add, more apps might be added to the list than those that you selected. (JI 2627085) |
If you change the settings of a SCEP profile or user credential profile based on a native keystore, users are not prompted to enroll the certificates again and only new certificates receive the updated settings. (JI 2626894) Workaround : Delete the profile and create and assign new one to apply the new settings. |
There is no indication in the management console that a device had failed Android SafetyNet attestation. (JI 2626552) |
When you are creating a user credential profile, if you select the 'Native keystore' option in the Certification authority connection list, the bottom of the page is cut off. (JI 2623712) |
When the browser does not have a certificate, or you import the wrong certificate, or the certificate is expired a timeout page displays instead of an error message. (JI 2621218) |
When you use invalid user credentials when you are configuring PKI for BlackBerry
Dynamics , a generic message displays: "Service Temporarily Unavailable." (JI 2572909) |
In the BlackBerry
Dynamics profile, if you upload a list that has more than 10000 banned passwords, it is truncated at 10000 passwords. (JI 2511201) |
When you are using the Advanced view in the management console, the device details page displays the incorrect Total internal storage amount for devices. (JI 2376060) |
When you create an IT policy for Android devices, the "Force the device and work space passwords to be different" rule implies that the personal and work space passwords must be different. However the passwords can be the same, although they are separate. (JI 2206856) |
You cannot update the version of an app in the BlackBerry UEM console before the newer version of the app is available in Google
Play . (JI 2203775)Workaround : Add the new version of the app to Google
Play , wait for Google to publish the app and then add the app to the BlackBerry UEM console |
When you delete a user that is enable to use BlackBerry Workspaces , the message that displays is misleading. (JI 1657607)Workaround : Log in to the console as a BlackBerry Workspaces Organization administrator who has an email address, remove the BlackBerry Workspaces service from the user, and then delete the user. |
BlackBerry UEM Core known issues
BlackBerry UEM Core
known issues The BlackBerry UEM Core might not shut down in a timely manner. (JI 2609643) Workaround : In Windows Task Manager, stop the BlackBerry UEM Core service. |
UEM Self-Service known issues
UEM Self-Service
known issuesThe expiration period for access keys generated in UEM Self-Service is 24 hours instead of 30 days. (JI 1659057) |
Documentation known issues
When you try to access pages in the documentation website docs.blackberry.com, you might receive page not found errors intermittently. Workaround : Clear you browser cache and try again, or use a browser in incognito mode. |