Managing client certificates for user accounts

You can add client certificates directly to individual user accounts or to a user credential profile assigned to the user account. Adding certificates directly to a user account is supported for 

BlackBerry Dynamics

 enabled devices or other managed 

iOS

 and 

Android

 devices. Uploading certificates to user credential profiles is supported for devices running 

BlackBerry 10 OS

 version 10.3.1 and later, 

iOS

 devices, and 

Android Enterprise

 devices.

To allow users to upload certificates that they can use to connect to your work 

Wi-Fi

 network, work VPN, and work mail server, use a user credential profile, which can be associated with a 

Wi-Fi

, VPN, or email profile

If you have an on-premises environment and you upload certificates for 

BlackBerry Dynamics

 apps to user accounts, you should configure a time to live for user certificates. When the time to live ends, the certificates are deleted from the server.