Skip Navigation

Preinstallation and preupgrade requirements

Review the following checklists before you begin installing or upgrading
BlackBerry UEM
.
Hardware requirements
The performance calculator provides minimum recommendations based on the values you enter. If you require additional capacity, redundancy, or room for growth, enter values that reflect these needs to accommodate any near future large app and user deployment projects.
Ensure your environment meets the hardware requirements for your needs.
Ensure that database latency requirements are met.
BlackBerry UEM Core
servers must have less than 5ms latency to the database server.
Third-party software requirements
Verify that your computer is running an operating system that supports BlackBerry UEM.
Verify that you have a supported browser on the computers that host the
UEM
management console.
The browser must support configuration of the following settings:
  • Support for JavaScript
  • Cookies turned on
  • Support for TLS
  • SSL certificate installed to permit trusted connections to the consoles
If you have a requirement to use a proxy server in your organization, verify that you have a supported proxy solution.
Ensure that
Windows
is up to date and that you perform any reboot required for the update.
Verify that your computer is running
Windows PowerShell
2.0 or later for the following:
  • RRAS for
    BlackBerry Secure Connect Plus
    setup during the
    UEM
    installation
  • Exchange ActiveSync
    gatekeeping (optional)
Verify that you have installed
JRE
17 on the servers where you will install
UEM
. Visit support.blackberry.com to review article 52117.
For more information about supported JRE versions, see the Compatibility matrix.
Environment configuration requirements
Verify that the BlackBerry UEM listening ports are configured.
Verify that you opened the necessary ports on your organization's firewall. For more information about port and firewall requirements, visit support.blackberry.com/community to read article 36470.
BlackBerry UEM
services do not support SSL Termination, SSL Offloading, SSL Packet Inspection or Deep Packet Inspection. Ensure these endpoint services are not enabled on your proxy/firewall.
Verify that the TCP/IP network protocols are turned on for your
UEM
database.
Verify that you have DNS support for resolving IP addresses into host names.
If you perform the installation or upgrade process on a computer that has more than one NIC, verify that the production NIC is first in the bind order in the
Windows
network settings.
If a
Windows
host operating system is configured in a workgroup instead of a domain, verify that you configured the primary DNS suffix. For information on configuring the primary DNS suffix, visit the
Microsoft
support website.
Ensure that the no count setting for the
Microsoft SQL Server
is disabled.
Verify that the
UEM
service account has local administrator permissions on each computer.
The
Microsoft SQL Server
account must have dbo as its default schema.
Ensure antivirus exclusions have been made for both the extracted installation files and the target installation and logging directories.
For more information, visit support.blackberry.com/community to read article 36596.
If you previously upgraded from a legacy
Good Control
environment and modified the Java Heap value, make note of the existing value. You will need to reapply the change after upgrade. For more information, visit support.blackberry.com/community to read article 56641.
Additional considerations
If you plan to install BlackBerry UEM in a DMZ, read Installing BlackBerry UEM in a DMZ.
Plan for an appropriate amount of downtime based on the number of servers in your environment.
Upgrading the first server may take 45-60 minutes. Additional servers may take 15-45 minutes depending on which components are installed and whether or not these components can be installed in parallel. Consider adding additional time to account for rolling back servers if troubleshooting is required.
Verify that you have the appropriate licenses.
Visit support.blackberry.com/community to review article 38980 about upgrades.
If your organization uses a proxy server for Internet access, verify that you have the computer name, port number, and credentials for the proxy server.
If your organization uses
Apple
VPP accounts, after the upgrade you must generate a new .vpp token file and edit your
Apple
VPP account information at Apps > iOS App licenses.
If you are planning a multistage upgrade, review the upgrade documentation for the versions you are upgrading to.
Decommission surplus nodes, if applicable. For more information, visit support.blackberry.com/community to read article 46210 and see the Installation and upgrade content for instructions on how to remove
BlackBerry UEM
software.