Skip Navigation

Prerequisites: Using 
Kerberos
 authentication for devices

When 
Kerberos
 is used with devices, if a valid TGT is available on the devices, users aren't prompted for login information when they access your organization's internal resources from the browser and apps in the work space.
To configure 
Kerberos
 authentication for specific domains, you can upload your organization’s 
Kerberos
 configuration file (krb5.conf). 
BlackBerry UEM
 supports the Heimdal implementation of 
Kerberos
.
Verify that the configuration file meets the following requirements:
  • The 
    Kerberos
     configuration must use TCP by default instead of UDP. Use the prefix tcp/ for KDC hosts.
  • If your organization uses VPN, the VPN gateway must allow traffic to the KDCs.