You can add client certificates directly to individual user accounts or to a user credential profile assigned to the user account. Adding certificates directly to a user account is supported for BlackBerry Dynamics enabled devices or other managed iOS and Android devices. Uploading certificates to user credential profiles is supported for iOS devices and Android Enterprise devices.

To allow users to upload certificates that they can use to connect to your work Wi-Fi network, work VPN, and work mail server, use a user credential profile, which can be associated with a Wi-Fi, VPN, or email profile.

If you have an on-premises environment and you upload certificates for BlackBerry Dynamics apps to user accounts, you should configure a time to live for user certificates. When the time to live ends, the certificates are deleted from the server.