Add new certificates to peripheral equipment

If you have added BlackBerry Dynamics certificates to peripheral equipment on your network, add the new certificate to peripheral equipment before adding it to UEM.

Use the latest versions of BlackBerry Dynamics apps

If you are replacing the BlackBerry Dynamics certificate for application management or Direct Connect, ensure that users are using the latest available version of BlackBerry Dynamics apps before you replace the certificate.

BlackBerry Dynamics apps must be open to receive a certificate

A user must open a BlackBerry Dynamics app on their device for it to receive a certificate from UEM. If you are replacing the BlackBerry Dynamics certificate for application management or Direct Connect and the change becomes effective before UEM pushes the certificate to all BlackBerry Dynamics apps, any apps that did not receive the certificate must be reactivated. Apps do not receive certificates while they are suspended on iOS devices or while Android devices are in Doze mode.

Verify that the BlackBerry Connectivity Node is accessible

If any BlackBerry Proxy instances are unreachable by UEM when BlackBerry Dynamics certificates are replaced, BlackBerry Dynamics apps will not be able to connect to those instances following the certificate replacement.

Scheduling certificate changes

If you are replacing the certificate for BlackBerry Dynamics servers, choose a period of low activity to restart the servers.

Allow sufficient time for new certificates to propagate to BlackBerry Proxy and BlackBerry Dynamics apps. If you are replacing only the certificate for BlackBerry Dynamics servers, allow at least 10 minutes before the server restarts.