Known issues in BlackBerry UEM 12.12
BlackBerry UEM
12.12Items marked with an asterisk (*) are new for this release.
Installation, upgrade, and migration known issues
* The ITPolicyKeyMapping user table is not removed from the database during a BlackBerry UEM upgrade. (EMM-143254)
Workaround : Manually remove the ITPolicyKeyMapping table from the database before upgrading BlackBerry UEM . |
When you migrate BlackBerry Work from a Good Control server to a BlackBerry UEM 12.12 server, upgrade the server to version 12.12 MR1, and then migrate the app again to another BlackBerry UEM 12.12 MR1 server, the migration might fail. (GD-49189)
Workaround : Re-activate the app on the destination server. |
When you migrate a BlackBerry
Dynamics app, that was built using a version of the BlackBerry
Dynamics SDK earlier than 7.1, from one BlackBerry UEM server to another BlackBerry UEM server, the app will begin migration but when the user opens the app, a 'Migration failed' message is displayed. (EMM-141581)
Workaround : Uninstall the app from the device. |
BlackBerry UEM does not block DEP devices that do not have the BlackBerry UEM Client or BlackBerry
Dynamics apps activated. (EMM-141410)
Workaround : Reactivate the device on the destination server. |
After you upgrade from BlackBerry UEM 12.11 to BlackBerry UEM 12.12, or install a new instance of BlackBerry UEM 12.12, you cannot use a Cisco ISE API solution to enhance the security management of network devices. (EMM-141132)
Workaround : Copy commons-collections-3.2.2 in :\C\Program Files\BlackBerry\UEM\ui\lib\runtime, paste it into :\C\Program Files\BlackBerry\UEM\Core\tomcat-core\lib, and restart the BlackBerry UEM Core . |
You cannot migrate a BlackBerry
Dynamics -enabled BlackBerry UEM Client on a device that has been activated using the 'Work and personal - full control (Samsung Knox)', or 'Work space only - (Samsung Knox)' activation types. (EMM-140909) |
When you migrate a Good Control policy set to BlackBerry UEM 12.12 MR1, if the 'Checks Antivirus Status' is set to Disabled, after the migration completes, the corresponding 'Antivirus Status' option is enabled in the compliance policy. (EMM-140859)
Workaround : In the migrated compliance policy, change the 'Enforcement action for BlackBerry Dynamics apps' option to 'Monitor and log'. |
You cannot migrate a Good Control policy set to BlackBerry UEM 12.12 MR1, if the 'Allow all Hardware Models' option is set to No, and you haven't selected any options for 'Permitted Hardware Models'. (EMM-140845) |
After you upgrade to BlackBerry UEM 12.12 MR1, compliance profiles are not upgraded to the latest user interface. (EMM-140825)
Workaround : After upgrading, wait 10 minutes before logging in to the console. |
When you migrate BlackBerry
Dynamics users and their iOS devices to BlackBerry UEM 12.12 MR1, if you have configured an APNs certificate on the source server but not on the destination server, the device is placed in the 'devices will be migrated' table. (EMM-140700)
Workaround : Configure APNs certificates on the destination server before migrating devices. |
You cannot delete a user from a source server after migrating their device. (EMM-140678)
Workaround : Remove or replace the activation profile for the user on the source server and then delete the user. |
A non-authentication delegate BlackBerry
Dynamics app is marked as 'migration completed' after the migration process for a non-authentication delegate BlackBerry UEM Client app starts. (EMM-140138) |
The BlackBerry Secure Connect Service might not start after a software upgrade. (EMM-137170)
Workaround : Perform the upgrade again. |
When you install the BlackBerry Workspaces plug-in with BlackBerry UEM , the next time you open the UEM management console, an error message appears even though BlackBerry UEM and BlackBerry Workspaces are behaving as expected. (SNP-561)Workaround: Dismiss the error message. It does not reappear. |
User and device management known issues
Note that some of these issues are for the
BlackBerry UEM Client
and will be fixed in a future BlackBerry UEM Client
release.* Easy activation of BlackBerry
Dynamics apps might fail on new iOS devices. (EMM-143135) |
A S/MIME certificate might be removed from a device after the user has installed it. (EMM-141529)
Workaround : Reinstall the certificate. |
The BlackBerry UEM Core does not send the Device IMEI value to the Lookout for Work app when the app activates. (EMM-140895) |
During SCEP enrollment, BlackBerry UEM might not be able to the retrieve the challenge password that the device uses for certificate enrollment. (EMM-140361) |
You cannot remove apps from a user on the 'Assigned to <x> users' tab. (EMM-136286)
Workaround : Go to the user's page and delete the app. |
Certificates from a two-key pair Entrust profile can't be installed on an iOS device. (EMM-120349) |
On an Android 9 device, if the Prevent Screen Capture security policy setting is disabled, the user can cut/copy/share data from a BlackBerry
Dynamics app to a non-BlackBerry
Dynamics app, even when data leakage prevention (DLP) is enabled via Pixel Launcher functionality. To ensure no data leakage, it is recommended that you enable the Prevent Screen Capture policy setting. (GD-36449) |
You can't use the Purebred app and Entrust smart credentials at the same time on iOS devices with BlackBerry
Dynamics . If you do, the Purebred certificate is imported on the incorrect user credential profile. (EMA-10637) |
If your organization uses PKI and Entrust smart credentials together, users might need to enroll the PKI certificate multiple times on the same device (maximum of once per app). (GD-35783) |
The 'Do not allow Android dictation' option in the BlackBerry Dynamics profile is used to stop dictation from keyboards, however there are certain keyboards that allow dictation through other channels. (GD-35440)
Workaround : To help mitigate the issue, you can apply an IT policy with the 'Allowed input methods' option set to 'System only' or enforce installation of particular keyboards in the Android work profile. |
After an iOS user imports a certificate, the user is taken through the import process again. (G3IOS-18108) |
Management console known issues
If a BlackBerry UEM administrator creates and assigns a user credential profile that is configured to use a native keystore CA connection, when a user opens a BlackBerry
Dynamics app on an Android 10 device, the following error message displays: "You are required to select a personal certificate. You may need to install it if the required one is missing. Please try again." This is due to a change with the KeyChain.choosePrivateKeyAlias API in Android 10: https://issuetracker.google.com/issues/135667502
To support a native keystore connection for BlackBerry
Dynamics apps on Android 10 devices, in the user credential profile, the administrator must do one of the following:
|
* You cannot save a DEP enrollment configuration if you set the "Allow removal of MDM Profile" option to Off. (EMM-144491) |
* On the Company directory page, the Client key field does not allow the tilde (~) character. (EMM-143686) |
* If you add an internal .apk app file, select the "Publish app in Google domain" option, and select the "All Android devices" option in the "Send to" list, when you click the "Update app descriptions and details from app stores" button on the Apps page, the app is removed from user's devices. (EMM-143243) |
* The app installation ranking might be ignored if the BlackBerry Work entitlement app is included in the list. (EMM-142953) |
* When you configure an iOS network usage profile for apps, if one of the apps that you add includes a hyphen in the app id, after you save the profile and refresh the page, the profile displays as a blank page. (EMM-142787) |
* Company directory synchronization fails when BlackBerry UEM Core detects an invalid email address for a user. (EMM-142690) |
* Activation email messages generated using the BlackBerry
Dynamics access key email template show <br> tags before and after the access key. (EMM-142652) |
* After you upgrade BlackBerry UEM , a user with the Junior HelpDesk role cannot set an activation password. (EMM-142625) |
* If you update the Autogenerated password complexity setting on the General Settings > Activation defaults page, the setting does not revert back to the default after you refresh the page. (EMM-142501)
For more information, visit support.blackberry.com/community to read article KB 62915. |
* When you copy the permissions from the security administrator role to create a new administrator role, the new administrator cannot manage certificates in the BlackBerry UEM Self Service portal. (EMM-141897) |
A warning icon might display next to the Apps menu item in the console, and even after you accept all the app permissions the icon might not disappear. (EMM-141702) |
If your organization is using BlackBerry UEM 12.12 MR1, you cannot apply the “Allow unified account view in BlackBerry Hub” policy to Android 10 devices. (EMM-141541)
Workaround : If you need this policy enabled, contact BlackBerry support. |
When you try to use the 'Change password and lock device' command in the management console for a device that was activated using an activation type, if you have configured the IT policy to use 'Numeric Complex' passwords, an error displays that states the password does not meet the minimum requirements. (EMM-141537)
Workaround : Do not use a password rule that enforces the 'Numeric Complex' option. |
App configurations for BlackBerry
Dynamics app do not display in the console if the name of the app configuration contains an apostrophe. (EMM-141440)
Workaround : Do not use apostrophes in app configuration names. |
You might not be able to remove a VPP account that has a lot of users. (EMM-141084) |
If an administrator does not have the 'View User Credential Profile' permission assigned, and you create a user credential profile to manually upload certificates, the administrator cannot upload or replace certificates. (EMM-141001) |
* Some of the fields and tooltips on the Enterprise Connectivity profile page are not translated correctly into German. (EMM-140442) |
The 'Tenant attestation enabled date' is updated in the database when you click Save on the Attestation page. (EMM-140416) |
If you set up a service on the BlackBerry Enterprise Identity page and you select the 'Allow Kerberos Desktop ZSO when specified by authentication policy', when a user uses a browser that is not configured to use Kerberos to log in to the service, the user is directed to the UEM Self-Service portal instead of the BlackBerry Enterprise Identity log in page. (EMM-140165) |
After you add a user, if you click the 'View activation email' link on the user's summary page, close the page, and click the link again, an error might display. (EMM-139907) |
In an IT policy for Android devices, the tooltip for the 'Apps allowed to access external storage' option states that the option can be applied to devices activated using the 'Work space only (Premium)' activation type but it cannot. (EMM-138293) |
A message does not display in the console when a BlackBerry
Dynamics connectivity verification compliance violation occurs. (EMM-137201) |
A per-app VPN connection cannot be established on a device that is activated with the 'User privacy – User enrollment' activation type. (EMM-136964) |
The BlackBerry Connectivity app might not be delivered to an Android device that has been activated using the 'Work and personal - user privacy (Samsung Knox )' activation type and 'Google
Play app management for Samsung Knox Workspace devices' is enabled. (EMM-136648)
Workaround : Assign the .apk file to the device as an internal app and select the "Publish app in Google domain" option. |
On the device tab, if you try to upgrade the software version on a supervised iOS device to a specific version number, when you click on Download and install, the OS is downloaded but not installed. Ticket FB7453536 was raised with Apple . (EMM-135440) |
When you add an internal app and an icon for the app, if you click the Refresh button on the Apps page, the icon does not display in the list of apps. (EMM-134638) |
Apps do not get unblocked after adding a corresponding version to my AccountBlackBerry UEM . (GD-45067) |
When you are using the Advanced view in the management console, the device details page displays the incorrect Total internal storage amount for devices. (EMM-98304) |
You can't update the version of an app in the BlackBerry UEM console before the newer version of the app is available in Google
Play . (EMM-89974)Workaround : Add the new version of the app to Google
Play , wait for Google to publish the app and then add the app to the BlackBerry UEM console |
BlackBerry Secure Connect Plus known issues
BlackBerry Secure Connect Plus
known issuesAfter you upgrade to BlackBerry UEM 12.12, the BlackBerry Secure Connect Plus service might not start and stay running if syslog is configured for localhost. (EMM-139980)
Workaround : Change the syslog configuration to connect to another server, or connect to 127.0.0.1 instead of "localhost". |
UEM Self-Service known issues
UEM Self-Service
known issuesThe expiration period for access keys generated in UEM Self-Service is 24 hours instead of 30 days. (EMM-78769) |
BlackBerry Web Services known issues
* When using the API, the set or place a certificate for a profile assigned to user request returns a "No certificate password specified in the request body" error, even if the password is provided. (EMM-140843) |