Add a client certificate to a user account
You can add a client certificate to an individual user account and send the certificate to
BlackBerry Dynamicsenabled devices or other managed
Add client certificates to user accounts when users devices need certificates for S/MIME or client authentication and the certificate can't be sent to devices via a user credential profile or SCEP profile.
The client certificate must have a .pfx or .p12 file name extension. You can send more than one client certificate to devices.
You can also use user credential profiles to upload certificates for individual users. User credential profiles can be associated with a
Wi-Fi, VPN, or email profile.
- On the menu bar, clickUsers > Managed devices.
- Search for a user account.
- In the search results, click the name of a user account.
- In theIT policy and profilessection, click .
- ClickUser certificate.
- Type a description for the certificate.
- In theApply certificate tosection, select one of the following:
- Other managed devices: Choose this option to send the certificate toiOSandAndroiddevices for all supported uses other than forBlackBerry Dynamicsapps.
- BlackBerry Dynamics enabled devices: Choose this option to send the certificate to devices to use withBlackBerry Dynamicsapps.
- In theCertificate filefield, clickBrowseto locate the certificate file.
- If you selectedOther managed devices, in thePasswordfield, type a password for the certificate. ForiOSdevices, a password is required. ForAndroiddevices, you do not have to provide a password inBlackBerry UEMif the device is running the latest version ofBlackBerry UEM Client. If you don't set a password, the user must enter the device password.
- ClickAdd.The certificate is listed in theUser certificatestable on the user summary page.
- ForBlackBerry Dynamicsenabled devices, configure the length of time uploaded certificates remain on theBlackBerry UEMserver before they are automatically deleted from the server. The default setting is 24 hours.