BlackBerry UEM profiles
|
Profile name |
Description |
Supported device types |
Ranked or not ranked |
For more information |
|---|---|---|---|---|
|
Policy | ||||
|
Knox Service Plugin |
Set up and configure the Knox Service Plugin. |
Android |
Ranked | |
|
Activation |
Configure device activation settings for users (for example, the activation type and the number and types of devices). |
All devices |
Ranked | |
|
BlackBerry Dynamics |
Enable BlackBerry Dynamics for users and configure standards for app access, data protection, and logging. |
All devices |
Ranked | |
|
App lock mode |
Configure a device to run only apps that you specify. |
Supervised iOS devices Samsung Knox devices activated with MDM Windows 10 Education and Windows 10 Enterprise devices |
Ranked | |
|
Enterprise Management Agent |
Configure how devices connect to UEM for app or configuration updates. |
iOS Android Windows |
Ranked |
Configuring how devices contact BlackBerry UEM for app and configuration updates |
|
Shared iPad |
Configure an iPad device so that it can be shared by multiple users. |
iOS |
Ranked | |
|
Compliance | ||||
|
Compliance |
Define the device conditions that are not acceptable in your organization and configure enforcement actions. |
All devices |
Ranked | |
|
Compliance (BlackBerry Dynamics) |
This is a read-only profile that displays the compliance settings that were imported from Good Control into an on-premises UEM environment. |
All devices |
N/A |
N/A |
|
Device SR requirements |
Configure the software release versions that must be installed on devices. |
Android |
Ranked | |
|
Email, calendar, and contacts | ||||
|
|
Configure how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data. |
iOS macOS Windows |
Ranked | |
|
IMAP/POP3 email |
Configure how devices connect to an IMAP or POP3 mail server and synchronize email messages. |
All devices |
Not ranked | |
|
Gatekeeping |
Specify the Microsoft Exchange servers to use for automatic gatekeeping. |
All devices |
Ranked | |
|
CalDAV |
Specify the server settings that devices can use to synchronize calendar information. |
iOS macOS |
Not ranked | |
|
CardDAV |
Specify the server settings that devices can use to synchronize contact information. |
iOS macOS |
Not ranked | |
|
Networks and connections | ||||
|
Wi-Fi |
Configure how devices connect to a work Wi-Fi network. |
All devices |
Not ranked | |
|
VPN |
Configure how devices connect to a work VPN. |
All devices |
Not ranked | |
|
DNS |
Specify the DNS servers that devices use to access specific domains. |
iOS macOS |
Ranked | |
|
Proxy |
Configure how devices use a proxy server to access web services on the Internet or a work network. |
iOS macOS Android |
Ranked | |
|
Enterprise connectivity |
Configure how devices can connect to your organization’s resources using enterprise connectivity and whether devices can use BlackBerry Secure Connect Plus. |
iOS Android |
Ranked |
Using BlackBerry Secure Connect Plus for connections to work resources |
|
BlackBerry Dynamics connectivity |
Configure the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using BlackBerry Dynamics apps. |
All devices |
Ranked | |
|
BlackBerry 2FA |
Enable two-factor authentication for users and configure pre-authentication and self-rescue features. |
iOS Android |
Ranked | |
|
Network usage |
Configure whether work apps on iOS devices can use the mobile network or data roaming. |
iOS |
Ranked | |
|
Web content filter |
Limit the websites that a user can view on supervised iOS devices. |
Supervised iOS devices |
Not ranked | |
|
Single sign-on |
A legacy profile that offers basic configuration for single sign-on authentication using Kerberos. |
iOS |
Ranked |
Enable automatic authentication for iOS devices using a single sign-on profile |
|
Single sign-on extension |
Enable iOS devices to authenticate automatically with domains and web services in your organization's network. |
iOS |
Not ranked |
Enable automatic authentication for iOS devices using a single sign-on extension profile |
|
Managed domains |
Configure iOS devices to notify users about sending email outside of trusted domains and restrict the apps that can open documents downloaded from internal domains. |
iOS |
Not ranked | |
|
AirPrint |
Add printers to users' AirPrint printer lists. |
iOS |
Not ranked | |
|
AirPlay |
Add devices to users' AirPlay device lists. |
iOS |
Not ranked | |
|
Access Point Name |
Specify APNs for devices to use to connect to carriers. |
Android |
Not ranked | |
|
Protection | ||||
|
Windows Information Protection |
Configure the Windows Information Protection setting in Windows 10. |
Windows 10 |
Ranked |
Set up Windows Information Protection for Windows 10 devices |
|
Microsoft Intune app protection |
Configure how to protect data in Office 365 apps. |
iOS Android |
Not ranked | |
|
Location service |
Request the location of devices and view approximate device locations on a map. |
iOS Android Windows |
Ranked | |
|
Do not disturb |
Block BlackBerry Work notifications during off periods. |
iOS Android |
Ranked |
Turn off notifications outside of work hours from BlackBerry Work |
|
Factory reset protection |
Control the factory reset protection feature on Android devices. |
Android |
Ranked |
Managing factory reset protection for Android Enterprise and Android Management devices |
|
BlackBerry Protect Mobile |
Configure the security features of BlackBerry Protect Mobile. |
iOS Android |
Ranked | |
|
Custom | ||||
|
Device |
Specify the information that displays on devices. |
iOS Android Windows |
Ranked | |
|
Home screen layout |
Configure the layout of apps on iOS devices. |
iOS |
Ranked | |
|
Custom payload |
Specify custom device configuration information using payload code. |
iOS |
Not ranked | |
|
Per-app notification |
Configure notification settings for system apps and apps that you manage with UEM. |
Supervised iOS devices |
Ranked | |
|
Certificates | ||||
|
CA certificate |
Specify a CA certificate that devices can use to establish trust with a work network or server. |
All devices |
Not ranked | |
|
Shared certificate |
Specify a client certificate that devices can use to authenticate users with a work network or server. |
iOS macOS Android |
Not ranked | |
|
User credential |
Specify the CA connection that devices use to obtain a client certificate that is used to authenticate with a work network or server. |
iOS macOS Android |
Not ranked |
Sending client certificates to devices and apps using user credential profiles |
|
SCEP |
Specify the SCEP server that devices use to obtain a client certificate that is used to authenticate with a work network or server. |
All devices |
Not ranked | |
|
OCSP |
Enable devices to check the status of S/MIME certificates. |
iOS Android |
Ranked | |
|
CRL |
Configure UEM to search for the status of S/MIME certificates. |
iOS Android |
Ranked | |
|
Certificate mapping profile |
Specify which client certificates apps must use. |
Android |
Ranked |
Specify the certificate used by an app using a certificate mapping profile |
|
ACME profile |
Specify the ACME server devices connect with to obtain and manage client certificates. |
iOS |
Ranked | |
|
Intercede user credential |
Enable a device to activate with Intercede MyID to download derived credentials certificates. |
iOS Android |
Ranked |
Use Intercede MyID to provide derived credentials certificates to devices |