Key BlackBerry UEMfeatures
Multiplatform device management
You can manage
Single, intuitive UI
You can view all devices in one place and access all management tasks in a single, web-based UI. You can share administrative duties with multiple administrators who can access the management console at the same time. You can toggle between default and advanced views to see options for displaying information and filtering the user list.
Trusted and secure experience
Device controls give you precise management of how devices connect to your network, what capabilities are enabled, and what apps are available. Whether the devices are owned by your organization or your users, you can protect your organization's information.
Separate work and personal needs
You can manage devices using
Samsung KNOX, and
BlackBerry Balancetechnologies that are designed to make sure that personal information and work information are kept separate and secure on devices. If the device is lost or the employee leaves the organization, you can delete only work-related information or all information from the device.
You can manage the
BlackBerryplug-in in the
BlackBerry UEMmanagement console.
BlackBerryis a Virtual SIM Platform (VSP) that allows you to separate work numbers and personal numbers on
For more information on installing and managing
BlackBerry, see the
Secure IP connectivity
You can use
BlackBerry Secure Connect Plusto provide a secure IP tunnel between work space apps on
Samsung KNOX Workspace, and
Androiddevices that have a work profile and your organization’s network. This tunnel gives users access to work resources behind the organization’s firewall while making sure the security of data using standard IPv4 protocols (TCP and UDP) and end-to-end encryption.
Simple user self-service
BlackBerry UEM Self-Servicereduces support requests and lowers IT costs for your organization while giving users the option to manage their devices in a timely manner. Using
BlackBerry UEM Self-Service, users can perform tasks like activating or switching devices, changing their device passwords remotely, deleting device data, or lock their lost or stolen devices, and address other critical support requirements.
Integration with services such as
BlackBerry Enterprise Identity,
BlackBerry 2FA, and
BlackBerry UEM Notifications
You can integrate
BlackBerry Enterprise Identity,
BlackBerry 2FA, and
BlackBerry UEM Notificationsthat allow you to add value to your organization's
Powerful app management
BlackBerry UEMis a comprehensive app management platform for all devices. You can deploy apps from all major app stores, including
Windows Store, and
You can share administrative duties with multiple administrators who can access the administration consoles at the same time. You can use roles to define the actions that an administrator can perform and reduce security risks, distribute job responsibilities, and increase efficiency by limiting the options available to each administrator. You can use predefined roles or create your own custom roles.
Company directory integration
You can use local, built-in user authentication to access the management console and self-service console, or you can integrate with the
Microsoft Active Directoryor LDAP company directories that you use in your organization's environment (for example,
BlackBerry UEMsupports connections to multiple directories. You can have any combination of both
Microsoft Active Directoryand LDAP.
You can also configure
BlackBerry UEMto automatically synchronize the membership of a directory-linked group to its associated company directory groups when the scheduled synchronization occurs.
When you configure the settings for directory-linked groups, you can select offboarding protection. Offboarding protection requires two consecutive synchronization cycles before device data or user accounts are deleted from
BlackBerry UEM. This feature helps to prevent unexpected deletions that can occur because of latency in directory replication.
Cisco Identity Services Engine(ISE) is network administration software that gives an organization the ability to control whether devices can access the work network (for example, permitting or denying
Wi-Fior VPN connections). This release allows you to create a connection between
BlackBerry UEMso that
Cisco ISEcan retrieve data about the devices that are activated on
Cisco ISEchecks device data to determine whether devices comply with your organization’s access policies.
Synchronizing with a
After you install
BlackBerry UEMversion 12.7 in an environment that has an existing
Good Controlserver, you must synchronize
BlackBerry UEMto enable
BlackBerry UEMversion 12.7 features.
You can set up regional connections for enterprise connectivity features by deploying one or more
BlackBerry Connectivity Nodeinstances in a dedicated region. This is known as a server group. Each
BlackBerry Connectivity Nodeincludes
BlackBerry Secure Connect Plus, the
BlackBerry Gatekeeping Service, the
BlackBerry Secure Gateway,
BlackBerry Proxy, and the
BlackBerry Cloud Connector. You can associate enterprise connectivity and email profiles with a server group so that any users that are assigned those profiles use a specific regional connection to the
BlackBerry Infrastructurewhen using
BlackBerry Connectivity Nodecomponents. Deploying more than one
BlackBerry Connectivity Nodein a server group also allows for high availability and load balancing.
You can activate and manage certain
Android-based, head-worn wearable devices in
BlackBerry UEM. For example, you can manage
Vuzix M300 Smart Glasses. Smart glasses provide users with hands-free access to visual information such as notifications, step-by-step instructions, images, and video and allow users to issue voice commands, scan bar-codes and use GPS navigation. Examples of
BlackBerry UEMmanagement capabilities that are supported include: Device activation using QR code, IT policies,
Wi-Fiand VPN profiles, app management and location services.
Androiddevices, if you want to protect data in
Microsoft Office 365apps using the MAM features of
Microsoft Intune, you can use Intune to protect app data while using
BlackBerry UEMto manage the devices.
Intuneprovides security features that protect data within apps. For example,
Intunecan require that data within apps be encrypted and prevent copying and pasting, printing, and using the Save as command. You can connect
Intune, allowing you to manage Intune app protection policies from within the