Install or upgrade BlackBerry UEM using the command prompt window

You can install or upgrade BlackBerry UEM using the command prompt window. Before you install the software using this method, you must acknowledge your acceptance of the terms and conditions of the BlackBerry Solution License Agreement (BBSLA) for your region. By acknowledging your acceptance of the BBSLA, you are agreeing to be bound by the terms and conditions of the BBSLA.

When you install or upgrade UEM from the command prompt, you can configure an encrypted connection between UEM and Microsoft SQL Server. By default, the connection is not encrypted. If you want to encrypt the connection after the installation or upgrade, see Encrypt the connection between BlackBerry UEM and Microsoft SQL Server. Please note that the encrypted connection can result in an increase in the CPU on the computer that hosts the BlackBerry UEM Core.

If you want to configure an encrypted connection between UEM and SQL Server when you install or upgrade UEM using the command prompt, you must export and store the certificate authority signing the SQL Server certificate (.cer) on the computer where you will install or upgrade UEM.
  1. Download the UEM software.
  2. Extract the UEM installation files.
  3. Open a text editor in administrator mode.
  4. Use the text editor to open the deployer.properties file.
  5. Change the deployer.properties file to include information that is specific to your organization's environment.
  6. In a command prompt window, in the directory where you extracted the BlackBerry UEM installation files, type setup.exe --script --iAcceptBESEULA.
    • Add the parameter --installSQL if you want to install a local Microsoft SQL Server database.
    • Add the parameter --showlog if you want to see the progress of the installation on the computer screen.
    • If you want to use a group Managed Service Account (gMSA) to install or upgrade UEM and run the UEM services, or you want to switch the UEM services to use a gMSA during the upgrade process, add the following parameter: --properties service.account.name=<domain>\<group_managed_service_account>$
    • If you want to configure an encrypted connection between UEM and Microsoft SQL Server, add the following parameters: 
      --propertyFiles deployer.properties --properties "db.encrypt=true,db.trustServerCertificate=false,db.trustmanagerclass=
mdm.contract.database.ssl.NiapSQLServerTrustManager,
db.trustmanagerconstructorarg=<path_to_SQL_certificate>"