Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.11
  3. Planning and Architecture
  4. BlackBerry UEM and BEMS Planning Guide
  5. Device management modes

Device management modes

The following tables list the device management modes to help you plan your environment. Some of these options can be combined or used in conjunction, and some modes are exclusive. For more information about and instructions to configure these features, see the Administration content.

iOS

Activation type
Device management mode
UEM service for behind-the-firewall enterprise connectivity
MDM controls
Enterprise email only
Yes
  • iOS
     email app only: 
    BlackBerry Secure Gateway
MDM controls
Device-wide VPN for email and apps
Yes
  • iOS
     email app: 
    BlackBerry Secure Gateway
  • Additional apps: 
    BlackBerry Secure Connect Plus
     
MDM controls
Device Control and App Deployment (
BlackBerry UEM Client
)
No
  • Behind the firewall with VPN profile 
MDM controls
BlackBerry Dynamics
Yes
  • BlackBerry Dynamics
     apps: 
    BlackBerry Proxy
     (Dynamics)
MDM controls
iOS
 Supervised - DEP
Yes
  • Email only: 
    BlackBerry Secure Gateway
  • Email and apps: 
    BlackBerry Secure Connect Plus
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
MDM controls
iOS
 Supervised - 
Apple Configurator
  2
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
MDM controls
Microsoft Intune
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
User privacy
Enterprise email only
Yes
  • iOS
     email app only: 
    BlackBerry Secure Gateway
User privacy
Work Apps catalog (
BlackBerry UEM Client
)
No
  • Behind the firewall with Activation Profile: Allow VPN management
  • VPN profile
User privacy
BlackBerry Dynamics
Yes
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
User privacy
Microsoft Intune
Yes
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
Device registration for 
BlackBerry 2FA
 only
BlackBerry 2FA
 only
No

Android

Activation type
Device management mode
UEM service for behind-the-firewall enterprise connectivity
MDM controls
Device Control and App Deployment (
BlackBerry UEM Client
)
No
MDM controls
BlackBerry Dynamics
Yes
  • Email and apps: 
    BlackBerry Proxy
MDM controls
Microsoft Intune
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
Work and personal - full control
Samsung KNOX
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
Work and personal - user privacy
Samsung KNOX
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
Work space only
Samsung KNOX
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
Work and personal - user privacy
Android Enterprise
No
  • Behind the firewall with VPN profile 
Work and personal - user privacy
 (Premium)
Android Enterprise
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
Work space only
Android Enterprise
  • Manual user activation
  • Zero-touch enrollment 
No
  • Behind the firewall with VPN profile 
Work space only
 (Premium)
Android Enterprise
  • Manual user activation
  • Zero-touch enrollment 
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
User privacy
Microsoft Intune
Yes
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
User privacy
Work apps catalog (
BlackBerry UEM Client
)
No
Device registration for 
BlackBerry 2FA
 only
BlackBerry 2FA
 only
No

 
BlackBerry 10

Activation type
Device management mode
UEM service for behind-the-firewall enterprise connectivity
Work and personal - Corporate
Work perimeter and user privacy perimeter
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
     or 
    BlackBerry Dispatcher
     with Mobile Data Connection Service
Work and personal - Regulated
Work and personal perimeter regulation
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
     or 
    BlackBerry Dispatcher
     with Mobile Data Connection Service
Work space only
Work perimeter only (Enterprise connectivity via 
BlackBerry Secure Connect Plus
 or 
BlackBerry Dispatcher
, MDS-CS)
Redundancy via 
BlackBerry Affinity Manager
Yes
  • Email and apps: 
    BlackBerry Secure Connect Plus
     or 
    BlackBerry Dispatcher
     with Mobile Data Connection Service

macOS
/
OS X
 

Activation type
Device management mode
UEM service for behind-the-firewall enterprise connectivity
MDM controls
Device management
No
  • Behind the firewall with VPN profile 

Windows

Activation type
Device management mode
UEM service for behind-the-firewall enterprise connectivity
MDM controls
Device management
No
  • Behind the firewall with VPN profile (
    Windows 10
    )  
MDM controls
BlackBerry Dynamics
Yes
  • Dynamics apps: 
    BlackBerry Proxy
     (Dynamics)
MDM controls
Microsoft Intune
No (unless combined with 
BlackBerry Dynamics
)
  • Behind the firewall with VPN profile (
    Windows 10
    )