Determining the status of S/MIME certificates on devices

You can use OCSP and CRL profiles to allow 

BlackBerry 10

 devices to check the status of S/MIME certificates. You can assign an OCSP profile and a CRL profile to user accounts, user groups, or device groups.

BlackBerry 10

 devices search each OCSP responder that you specify in an OCSP profile and retrieves the S/MIME certificate status. Devices that are running 

BlackBerry 10 OS

 version 10.3.1 and later can send certificate status requests to 

BlackBerry UEM

, and you can use CRL profiles to configure 

BlackBerry UEM

 to search for the status of S/MIME certificates using HTTP, HTTPS, or LDAP.

If you use 

Exchange ActiveSync

 for certificate retrieval, 

iOS

 and 

Android

 devices use 

Exchange ActiveSync

 to check the status of S/MIME certificates. If you use LDAP for certificate retrieval, 

iOS

 and 

Android

 devices use OCSP to check the status of certificates. 

iOS

 and 

Android

 devices do not use OCSP profiles. Devices check the OCSP responder within the certificate.

For more information about certificate status indicators, see the user guide for the device to read about secure email icons.