Skip Navigation

What's new in BlackBerry UEM Cloud


Migration support:
You can perform migrations from BlackBerry UEM on-premises 12.13 and later to BlackBerry UEM Cloud.


Support for deploying apps in development from Google Play
: Google Play allows developers to create tracks for prerelease apps, for example a Beta track, and target those tracks to specific enterprises. If a developer has targeted prerelease apps to your organization, UEM administrators can now select which app track to deploy when assigning an app to a user, group, or device.
Android MDM controls deprecation
Android 10 and later devices do not support MDM controls activations. New installations of BlackBerry UEM no longer display Android MDM controls as an option in the activation profile by default. A new UEM setting allows you to remove the Android MDM controls option from the activation profile on upgraded UEM instances. You can also re-add the activation type to both new and upgraded instances.
Android Enterprise device logging
: You can view security logs for Android Enterprise devices that have been activated using an Android Enterprise activation type.
: Contact BlackBerry Support if you want to enable this feature in your BlackBerry UEM Cloud environment.
Specify apps that can request access to both work and personal data
: The new “Apps allowed to request cross-profile access" IT policy rule allows you to specify which apps can request permission from the user to access data in both the work and personal profiles


Manage new features in iOS 14
: BlackBerry UEM includes new settings to manage capabilities in iOS 14 and iPadOS 14. Updates include per account VPN settings (for email, IMAP/POP3, CardDav, and CalDav profiles), a new DNS profile, additional Wi-Fi and VPN settings, and the ability to send a command to set the device time zone.

BlackBerry Dynamics

Defer certificate enrollment for BlackBerry Dynamics apps
: Previously, users could not access a BlackBerry Dynamics app unless they completed the certificate enrollment process. Administrators can now enable a setting in user credential profiles that allows users to dismiss certificate enrollment and complete it later. For the Native Keystore connection type, the user is prompted to complete certificate enrollment each time the user starts the app. For the Entrust Smart Credential connection type, the app will not prompt the user again, but the user can complete certificate enrollment using the UEM Client.
Activate devices using third-party IDP
: You can now use BlackBerry UEM and BlackBerry Enterprise Identity to redirect authentication to a third-party Identity Provider (IDP) such as Okta (new in this release) or Ping Federated, which provides users with a familiar authentication interface. This allows users to enter their existing credentials on their device during activation.
: Activation using Okta is not supported for users that were created in Good Control or with the legacy Good Control SOAP APIs.

BlackBerry Enterprise Mobility Server

  • Modern authentication enhancements
    Cloud now supports modern authentication in hybrid
    Microsoft Office 365
    and on-premises
    Microsoft Exchange Server
  • Support for SCP lookup
    Cloud now supports the use of SCP and SSL for SCP to query
    Microsoft Active Directory
    using LDAP and locate Autodiscover endpoint URLs when using Credential authentication. This feature requires that a
    BlackBerry Connectivity Node
    instance is installed and configured.