Skip Navigation

Configuring 
BlackBerry UEM
 for the first time

The following table summarizes the initial configuration tasks covered in this guide. Use this table to determine which configuration tasks you should complete. After you complete the appropriate tasks, you are ready to set up administrators, create and manage users and groups, set up device controls, and activate devices.
Task
Description
You can replace the default self-signed certificates used by 
BlackBerry UEM
 to authenticate communication between various 
UEM
 components and with devices.
You can configure 
BlackBerry UEM
 to send data through a TCP proxy server or an instance of the 
BlackBerry Router
 before it reaches the 
BlackBerry Infrastructure
. You can also configure 
BlackBerry UEM
 to send data through an HTTP proxy before it reaches the 
BlackBerry Dynamics NOC
.
If your organization uses a proxy server for connections between servers inside your network, you may need to configure server-side proxy settings to allow the 
BlackBerry UEM Core
 to communicate with remote instances of the management console.
You can connect 
BlackBerry UEM
 to one or more company directories, such as 
Microsoft Active Directory
 or an LDAP directory, so that 
BlackBerry UEM
 can access user data to create user accounts.
If you want 
BlackBerry UEM
 to send activation emails and other notifications to users, you must specify the SMTP server settings that 
BlackBerry UEM
 can use.
To retain database service and data integrity if issues occur with the 
BlackBerry UEM
 database, you can install and configure a failover database that serves as a backup to the principal database.
If you want to use 
BlackBerry UEM
 to deploy 
iOS
 and 
Android
 apps managed by 
Microsoft Intune
 or if you want to manage 
Windows 10
 apps in 
BlackBerry UEM
, connect 
BlackBerry UEM
 to 
Microsoft Azure
.
If you want to manage and send data to 
iOS
 or 
macOS
 devices, you must obtain a signed CSR from 
BlackBerry
, use it to obtain an APNs certificate from 
Apple
, and register the APNs certificate with the 
BlackBerry UEM
 domain.
If you want to use the 
BlackBerry UEM
 management console to manage 
iOS
 devices that your organization purchased from 
Apple
 for DEP, you must configure this feature.
To support 
Android Enterprise
 devices, you need to configure your 
G Suite
 or 
Google Cloud
 domain to support third-party mobile device management providers and configure 
BlackBerry UEM
 to communicate with your 
G Suite
 or 
Google Cloud
 domain.
You can simplify the process for activating 
Windows 10
 devices by making configuration changes to your network so that users don't need to type a server address.
You can use the management console to migrate users, devices, groups, and other data from a source on-premises 
BlackBerry UEM
 or 
Good Control
 (standalone).
You can configure settings that are specific to 
BlackBerry Proxy
 and 
BlackBerry Dynamics
 apps.
You can create a connection between 
Cisco ISE
 and 
BlackBerry UEM
 so that 
Cisco ISE
 can retrieve device data from 
BlackBerry UEM
 and enforce network access control policies.