Architecture: 

BlackBerry UEM

 for dark sites

The 

BlackBerry UEM Core

 is the central component of the 

BlackBerry UEM

 architecture. It consists of several subcomponents that are responsible for:

Logging, monitoring, reporting, and management functions
Authentication and authorization services
Scheduling and sending commands, IT policies, and profiles to devices

The 

BlackBerry UEM

 database is a relational database that contains user account information and configuration information that 

BlackBerry UEM

 uses to manage devices.

The 

BlackBerry Gatekeeping Service

 sends commands to 

Exchange ActiveSync

 to add devices to an allowed list when devices are activated on 

BlackBerry UEM

. Unmanaged devices that try to connect to an organization's mail server can be reviewed, verified, and blocked or allowed by an administrator using the 

BlackBerry UEM

 management console.

The management console and 

UEM Self-Service

 provide a browser-based user interface for administrator and user access to 

BlackBerry UEM

.

You use the management console to manage system settings, users, devices, and apps.

Users can use 

UEM Self-Service

 to set an activation password and send commands to devices, such as set password, lock device, and delete device data.

If you are managing 

Samsung Knox

 devices, a 

Samsung Knox

 License Management server is installed with 

BlackBerry UEM

 for dark sites so that 

BlackBerry UEM

 doesn't have to connect to the web-based 

Samsung Knox

 License Management System to get license information.

Samsung Knox

 devices communicate with the KLM server using your work 

Wi-Fi

 network.

To manage 

iOS

 devices, 

BlackBerry UEM

 must send notifications to devices through an APNs server. When devices receive a notification from APNs, they contact 

BlackBerry UEM

 for updates.

For information about securing connections to APNs or possible alternatives to using the public APNs, contact your 

Apple

 support representative.