Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Administration
  4. Securing connections using PKI
  5. Sending certificates to devices and apps using profiles

Sending certificates to devices and apps using profiles

You can send certificates to devices and apps using the following profiles available in the Policies and Profiles library:
Profile
Description
CA certificate
CA certificate profiles specify a CA certificate that devices and 
BlackBerry Dynamics
 apps can use to trust the identity associated with any client or server certificate that has been signed by that CA.
User credential 
User credential profiles send certificates to devices in the following ways:
  • They can specify a connection to your organization's PKI software to send client certificates to devices and 
    BlackBerry Dynamics
     apps.
  • They can allow you to manually upload certificates in 
    BlackBerry UEM
     and, in an on-premises environment, allow users to upload certificates using 
    BlackBerry UEM Self-Service
    .
  • They can allow 
    BlackBerry Dynamics
     apps on 
    Android
     devices to use certificates from the device native keystore. 
  • They can allow 
    BlackBerry Dynamics
     apps to import certificates from other app-based PKI solutions such as 
    Purebred
    .
SCEP
SCEP profiles specify how devices and 
BlackBerry Dynamics
 apps connect to, and obtain client certificates from, your organization's CA using a SCEP service.
Shared certificate
Shared certificate profiles specify a client certificate that 
BlackBerry UEM
 sends to 
iOS
 and 
Android
 devices. 
BlackBerry UEM
 sends the same client certificate to every user that the profile is assigned to.
For 
iOS
 and 
Android
 devices, you can also send a client certificate to a device by adding the certificate directly to a user account. For more information, see Add a client certificate to a user account.
For 
iOS
, 
Android
, and 
BlackBerry 10
 devices, if your organization uses certificates for S/MIME, you can also use profiles to allow devices to get recipient public keys and check certificate status. For more information, see Extending email security using S/MIME.
For 
BlackBerry Dynamics
 apps to use certificates sent by profiles, you must select "Allow 
BlackBerry Dynamics
 apps to use user certificates, SCEP profiles, and user credential profiles" in the settings for the app.