Importing and configuring certificates Consider the following when you import certificates: If you want to replace the BEMS auto-generated SSL certificate, import a new SSL certificate. Import the BlackBerry Proxy and the BlackBerry UEM certificate chains into the BEMS Java keystore. If necessary, assign the BEMS SSL certificate to users using a CA certificate profile.