Skip Navigation

BlackBerry Intelligent Security
 software requirements

The requirements listed below assume that you are using the  "Use policies created in the Analytics portal" compatibility mode. This mode is required if you want to use the latest 
BlackBerry Intelligent Security
 features and enhancements. If you implemented 
BlackBerry Intelligent Security
 before March 2020 and you are using the "Use policies created in UEM" compatibility mode, you must perform some administrative tasks before you can change the compatibility mode. For more information, see Policy compatibility mode.
If you are using the "Use policies created in UEM" mode, follow the system requirements, setup, and management instructions in the BlackBerry Intelligent Security Legacy Mode Administration Guide.
Requirement
Description
BlackBerry UEM
BlackBerry Intelligent Security
 is supported in:
  • BlackBerry UEM Cloud
  • BlackBerry UEM
     version 12.12 MR1
You must purchase 
BlackBerry Intelligent Security
 licenses to enable the service for users. Contact your 
BlackBerry
 representative or complete a contact form for more information.
After 
BlackBerry
 applies the licenses, see Enable BlackBerry Intelligent Security in your UEM domain.
For more information about configuring and managing 
UEM
, see the BlackBerry UEM documentation.
BlackBerry Intelligent Security
 entitlement
After 
BlackBerry Intelligent Security
 licenses are added for your organization, you will receive a 
BlackBerry Intelligent Security
 entitlement. The entitlement information that you will see in the management console is:
  • App name: 
    BlackBerry Intelligent Security
     entitlement
  • BlackBerry Dynamics
     entitlement ID: com.blackberry.entitlement.geoanalytics 
You must assign this entitlement to 
BlackBerry Dynamics
 app users so that 
BlackBerry Intelligent Security
 can receive and process behavioral and location data from the apps. You can assign the entitlement to all users, specific user groups, or specific user accounts based on your organization's needs. After assigning the entitlement, it may take up to 24 hours for the accounts and data to be ready.
Enforcing 
BlackBerry 2FA
 authentication
If you want to use 
BlackBerry Enterprise Identity
 authentication profiles to enforce 
BlackBerry 2FA
 authentication, you must enable 
BlackBerry 2FA
 for users' devices. For more information, see Steps to manage BlackBerry 2FA in BlackBerry UEM in the 
BlackBerry 2FA
 Administration content.
BlackBerry Dynamics
 apps with the 
BlackBerry Analytics SDK
Use the following versions of 
BlackBerry Dynamics
 apps to ensure that the apps have the required versions of the 
BlackBerry Dynamics SDK
 and the 
BlackBerry Analytics SDK
:
For more information about adding and distributing 
BlackBerry Dynamics
 apps in a 
UEM
 domain, see Managing BlackBerry Dynamics apps.
Within the settings of each 
BlackBerry Dynamics
 app, users can enable or disable 
BlackBerry Intelligent Security
 (by default, it is enabled). If it is disabled, 
BlackBerry Intelligent Security
 cannot collect data and events from the app. Encourage users to enable this setting to ensure that 
BlackBerry Intelligent Security
 can build and use an accurate risk model.
Device connections to the 
BlackBerry Intelligent Security
 services
For optimal performance, 
BlackBerry
 recommends permitting a direct connection between devices and the 
BlackBerry Intelligent Security
 services. In the 
BlackBerry Dynamics
 connectivity profiles that are assigned to users, in the App server section, add the 
BlackBerry Intelligent Security
 entitlement. Add the following app servers:
  • receiver.analytics.blackberry.com
  • discovery.bis.blackberry.com
  • scoring.bissanalytics.blackberry.com
  • service.bis.blackberry.com
For each app server, specify port 443, primary priority, and a direct connection.
Alternatively, you can manage device connections to the services using other configuration options available in the 
BlackBerry Dynamics
 connectivity profile. For more information, see Create a BlackBerry Dynamics connectivity profile in the UEM Administration content.