Skip Navigation

Profiles reference - 
iOS
 devices

The following table lists all 
BlackBerry UEM
 profiles supported on 
iOS
 devices:
Profile name
Description
Configure
Policy
Activation
Specifies the device activation settings for users, such as the activation type and the number and types of devices.
BlackBerry Dynamics
Allows devices to access 
BlackBerry Dynamics
 apps such as 
BlackBerry Work
BlackBerry Access
, and 
BlackBerry Connect
.
App lock mode
Specify a single app to run on devices.
Supervised 
iOS
 devices only.
Enterprise Management Agent
Specifies when devices connect to 
BlackBerry UEM
 for app or configuration updates when a push notification is not available.
Compliance
Compliance
Defines the device conditions that are not acceptable in your organization and sets enforcement actions.
Compliance (
BlackBerry Dynamics
)
This is a read-only profile that displays the compliance settings that were imported from 
Good Control
into an on-premises 
BlackBerry UEM
.
Email, calendar, and contacts
Email
Specifies how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data using Exchange ActiveSync or IBM Notes Traveler.
IMAP/POP3 email
Specifies how devices connect to an IMAP or POP3 mail server, and how to synchronize email messages.
Gatekeeping
Specifies the 
Microsoft Exchange
 servers to use for automatic gatekeeping.
CalDAV
Specifies the server settings that devices can use to synchronize calendar information.
CardDAV
Specifies the server settings that devices can use to synchronize contact information.
Networks and connections
Wi-Fi
Specifies how devices connect to a work 
Wi-Fi
 network.
VPN
Specifies how devices connect to a work VPN.
Proxy
Specifies how devices use a proxy server to access web services on the Internet or a work network.
Enterprise connectivity
Specifies how devices can connect to your organization’s resources using enterprise connectivity. For 
iOS
 devices, the enterprise connectivity profile specifies whether devices can use 
BlackBerry Secure Connect Plus
.
BlackBerry Dynamics
 connectivity
Defines the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using 
BlackBerry Dynamics
 apps.
BlackBerry 2FA
Enables two-factor authentication for users and specifies the configuration of the preauthentication and self-rescue features.
Network usage
Allows you to control whether work apps on iOS devices can use the mobile network or data roaming.
Web content filter
Limits the websites that a user can view on supervised iOS devices.
Supervised 
iOS
 devices only.
Single sign-on
Specifies how devices authenticate with secure domains automatically after users type their username and password for the first time.
Managed domains
Configures 
iOS
 devices to notify users about sending email outside of trusted domains and restricts the apps that can view documents downloaded from internal domains.
AirPrint
Allows you to add printers to users' AirPrint printer lists.
AirPlay
Allows you to add devices to users' AirPlay device lists.
Single sign-on extension
Allows devices running 
iOS
 (or iPadOS) 13 or later to authenticate using single sign-on.
Protection
Microsoft Intune
 app protection 
Allows you to manage apps protected by 
Microsoft Intune
.
Location service
Allows you to request the location of devices and view the approximate locations on a map.
Do not disturb
Allows you to block 
BlackBerry Work for iOS
 notifications during off-work days and hours that you define.
Custom
Device
Allows you to configure the information that displays on devices.
Custom payload
Specifies custom configuration information using payload code for devices.
Per-app notification
Allows you to configure the notification settings for system apps and apps that you manage using 
BlackBerry UEM
.
Supervised 
iOS
 devices only.
Certificates
CA certificate
Specifies a CA certificate that devices can use to establish trust with a work network or server.
Shared certificate
Specifies a client certificate that devices can use to authenticate users with a work network or server.
User credential
Specifies the CA connection that devices use to obtain a client certificate that is used to authenticate with a work network or server.
SCEP
Specifies the SCEP server that devices use to obtain a client certificate that is used to authenticate with a work network or server.