- Configuring BlackBerry UEM for the first time
- Changing BlackBerry UEM certificates
- Configuring BlackBerry UEM to send data through a proxy server
- Sending data through a TCP proxy server to the BlackBerry Infrastructure
- Sending data through the BlackBerry Router to the BlackBerry Infrastructure
- Configuring connections through internal proxy servers
- Connecting to your company directories
- Configuring Microsoft Active Directory authentication in an environment that includes Exchange linked mailboxes
- Connect to a Microsoft Active Directory instance
- Connect to an LDAP directory
- Enable directory-linked groups
- Enabling onboarding
- Synchronize a company directory connection
- Connecting to an SMTP server to send email notifications
- Configuring database mirroring
- Connecting BlackBerry UEM to Microsoft Azure
- Enable access to the BlackBerry Web Services over the BlackBerry Infrastructure
- Obtaining an APNs certificate to manage iOS and macOS devices
- Obtain a signed CSR from BlackBerry
- Request an APNs certificate from Apple
- Register the APNs certificate
- Renew the APNs certificate
- Troubleshooting APNs
- Configuring BlackBerry UEM for DEP
- Configuring BlackBerry UEM to support Android Enterprise devices
- Simplifying Windows 10 activations
- Deploy a discovery service to simplify Windows 10 activations
- Integrating UEM with Azure Active Directory join
- Configuring Windows Autopilot in Microsoft Azure
- Migrating users, devices, groups, and other data from a source server
- Prerequisites: Migrating users, devices, groups, and other data from a source server
- Connect to a source server
- Considerations: Migrating IT policies, profiles, and groups from a source server
- Migrate IT policies, profiles, and groups from a source server
- Complete policy and profile migration for BlackBerry Dynamics-activated users
- Considerations: Migrating users from a source server
- Migrate users from a source server
- Considerations: Migrating devices from a source server
- Migrate devices from a source server
- Migrating DEP devices
- Configuring BlackBerry UEM to support BlackBerry Dynamics apps
- Manage BlackBerry Proxy clusters
- Configure Direct Connect using port forwarding
- Configure BlackBerry Dynamics properties
- Configure communication settings for BlackBerry Dynamics apps
- Sending BlackBerry Dynamics app data through an HTTP proxy
- Configuring Kerberos for BlackBerry Dynamics apps
- Domains, realms, and forests
- Configure Kerberos Constrained Delegation
- Troubleshooting and diagnostics
- Configuring Kerberos PKINIT
- Integrating BlackBerry UEM with Cisco ISE
- Requirements: Integrating BlackBerry UEM with Cisco ISE
- Create an administrator account that Cisco ISE can use
- Add the BlackBerry Web Services certificate to the Cisco ISE certificate store
- Connect BlackBerry UEM to Cisco ISE
- Example: Authorization policy rules for BlackBerry UEM
- Managing network access and device controls using Cisco ISE
Create an administrator account that Cisco ISE can use
Cisco ISEcan use
Cisco Identity Services Engine(ISE) requires a dedicated
BlackBerry UEMadministrator account that it can use to retrieve data about devices. You can use an existing administrator account or you can create a new administrator account. It must be a local administrator account (not a directory user). The administrator account requires a role with the following permissions:
- View users and activated devices
- Manage devices
- Lock device and set message
- Delete only work data
- Delete all device data
The default Security Administrator and Enterprise Administrator roles have these permissions. To create a new administrator account with a custom role, complete the following steps using an administrator account with the Security Administrator role.
If you want to create a custom role for the administrator account, in the
BlackBerry UEMmanagement console, click
Settings > Administrators > Roles >. Select the necessary permissions. Click
- In theBlackBerry UEMmanagement console, on the menu bar, clickUsers.
- ClickAdd user.
- Click theLocaltab.
- Specify a first name, last name, display name, username, and email address.
- In theConsole passwordfield, type a password for the administrator account.
- Select theDo not set device activation passwordoption.
- On the menu bar, clickSettings.
- ClickAdministrators > Users.
- Click .
- Search for and click the user account that you created.
- In theRoledrop-down list, click the custom role that you created, the default Security Administrator role, or the default Enterprise Administrator role.