Optionally, you can configure HTTPS for BEMS to the BlackBerry Proxy server. By default, the CA root certificate of the BlackBerry Proxy server is not located in the Java keystore that hosts BEMS or in the BEMS database. The BlackBerry Proxy server uses a certificate that is signed by BlackBerry UEM. This means that BEMS cannot verify the BlackBerry Proxy server’s SSL certificate; and, therefore, any HTTPS connection made from BEMS to the BlackBerry Proxy server fails.