Key BlackBerry UEM features
Multiplatform device management
You can manage
Windows 10, and
Single, intuitive UI
You can view all devices in one place and access all management tasks in a single, web-based UI. You can share administrative duties with multiple administrators who can access the management console at the same time. You can toggle between default and advanced views to see options for displaying information and filtering the user list.
Trusted and secure experience
Device controls give you precise management of how devices connect to your network, what capabilities are enabled, and what apps are available. Whether the devices are owned by your organization or your users, you can protect your organization's information.
Separate work and personal needs
You can manage devices using
Samsung Knox, and
BlackBerry Balancetechnologies that are designed to make sure that personal information and work information are kept separate and secure on devices. If the device is lost or the employee leaves the organization, you can delete only work-related information or all information from the device.
Secure IP connectivity
You can use
BlackBerry Secure Connect Plusto provide a secure IP tunnel between work space apps on
Samsung Knox Workspace, and
Androiddevices that have a work profile and your organization’s network. This tunnel gives users access to work resources behind the organization’s firewall while making sure the security of data using standard IPv4 protocols (TCP and UDP) and end-to-end encryption.
Simple user self-service
BlackBerry UEM Self-Servicereduces support requests and lowers IT costs for your organization while giving users the option to manage their devices in a timely manner. Using
BlackBerry UEM Self-Service, users can perform tasks like activating or switching devices, changing their device passwords remotely, deleting device data, or lock their lost or stolen devices, and address other critical support requirements.
Integration with services such as
BlackBerry Enterprise Identity, and
You can integrate
BlackBerry Enterprise Identity, and
BlackBerry 2FAthat allow you to add value to your organization's
Powerful app management
BlackBerry UEMis a comprehensive app management platform for all devices. You can deploy apps from all major app stores, including
Windows Store, and
You can share administrative duties with multiple administrators who can access the administration consoles at the same time. You can use roles to define the actions that an administrator can perform and reduce security risks, distribute job responsibilities, and increase efficiency by limiting the options available to each administrator. You can use predefined roles or create your own custom roles.
Company directory integration
You can use local, built-in user authentication to access the management console and self-service console, or you can integrate with the
Microsoft Active Directoryor LDAP company directories that you use in your organization's environment (for example,
BlackBerry UEMsupports connections to multiple directories. You can have any combination of both
Microsoft Active Directoryand LDAP.
You can also configure
BlackBerry UEMto automatically synchronize the membership of a directory-linked group to its associated company directory groups when the scheduled synchronization occurs.
When you configure the settings for directory-linked groups, you can select offboarding protection. Offboarding protection requires two consecutive synchronization cycles before device data or user accounts are deleted from
BlackBerry UEM. This feature helps to prevent unexpected deletions that can occur because of latency in directory replication.
BlackBerry UEM Cloudwith your company directory you must install the
BlackBerry Connectivity Node. You can install one or more instances of the
BlackBerry Connectivity Node.
If you have
BlackBerry UEM Cloud, instead of having to maintain your own highly available service for device management, with all the upfront and maintenance costs,
BlackBerrymaintains the service and maximizes uptime for you.
You can migrate users, devices, groups, and other data from an on-premises
BlackBerry UEMsource database to a new on-premises or
BlackBerry UEM Cloudinstance.
If you have configured
BlackBerry UEMto manage Google Play accounts can migrate
Android Enterprisedevices from an on-premises
BlackBerry UEMserver to
BlackBerry UEM Cloudor another on-premises
You can migrate
BlackBerry Dynamicsusers from on-premises
BlackBerry UEM(version 12.13 or later) to a
BlackBerry UEM Cloud.
Cisco Identity Services Engine(ISE) is network administration software that gives an organization the ability to control whether devices can access the work network (for example, permitting or denying
Wi-Fior VPN connections). You can create a connection between
BlackBerry UEMon-premises so that
Cisco ISEcan retrieve data about the devices that are activated on
Cisco ISEchecks device data to determine whether devices comply with your organization’s access policies.
You can set up regional connections for enterprise connectivity features by deploying one or more
BlackBerry Connectivity Nodeinstances in a dedicated region. This is known as a server group. Each
BlackBerry Connectivity Nodeincludes
BlackBerry Secure Connect Plus, the
BlackBerry Gatekeeping Service, the
BlackBerry Secure Gateway,
BlackBerry Proxy, and the
BlackBerry Cloud Connector. You can associate enterprise connectivity and email profiles with a server group so that any users who are assigned those profiles use a specific regional connection to the
BlackBerry Infrastructurewhen using
BlackBerry Connectivity Nodecomponents. Deploying more than one
BlackBerry Connectivity Nodein a server group also allows for high availability and load balancing.
You can activate and manage certain
Android-based, head-worn wearable devices in
BlackBerry UEM. For example, you can manage
Vuzix M300 Smart Glasses. Smart glasses provide users with hands-free access to visual information such as notifications, step-by-step instructions, images, and video and allow users to issue voice commands, scan bar-codes and use GPS navigation. Examples of
BlackBerry UEMmanagement capabilities that are supported include: Device activation using QR code, IT policies,
Wi-Fiand VPN profiles, app management and location services.
Androiddevices, if you want to protect data in
Microsoft Office 365apps using the MAM features of
Microsoft Intune, you can use Intune to protect app data while using
BlackBerry UEMto manage the devices.
Intuneprovides security features that protect data within apps. For example,
Intunecan require that data within apps be encrypted and prevent copying and pasting, printing, and using the Save as command. You can connect
Intune, allowing you to manage Intune app protection policies from within the