If your organization uses a PKI solution to issue certificates, you can extend the certificate-based authentication provided by those PKI services to the devices and apps that you manage with BlackBerry UEM.

Entrust products (for example, Entrust IdentityGuard and Entrust Authority Administration Services) and OpenTrust products (for example, OpenTrust PKI and OpenTrust CMS) provide CAs that issue client certificates. You can configure a connection with your organization’s PKI software and use profiles to send the CA certificate and client certificates to devices.

For BlackBerry Dynamics enabled devices, you can also set up a PKI connector that creates a connection between UEM and a CA server to enroll certificates for BlackBerry Dynamics apps or use an app that supports app-based certificate enrollment such as Purebred.