Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.16
  3. Administration
  4. Securing connections using PKI
  5. Sending certificates to devices and apps using profiles
  6. Sending client certificates to devices and apps using user credential profiles
  7. Creating user credential profiles for app-based certificates
  8. Configure BlackBerry Dynamics apps to use app-based certificates

Configure 
BlackBerry Dynamics
 apps to use app-based certificates

BlackBerry Dynamics
 apps automatically select which certificate to use for S/MIME and for authentication over TLS connections based on the key usage and extended key usage properties in the certificates. If two or more certificates have same set of properties, apps may not be able to resolve which certificate to use for TLS authentication. You can help apps determine which certificate to use by following the steps below.
  1. In the 
    BlackBerry UEM
     management console, on the menu bar, click 
    Apps
    . 
  2. In the app list, select the app (for example, 
    BlackBerry Work
     or 
    BlackBerry Access
    ).
  3. Select the 
    Allow BlackBerry Dynamics apps to use user certificates and user credential profiles
     option.
  4. If you are configuring 
    BlackBerry Work
    , in the App configuration section, click + and perform one of the following tasks:
    Task
    Steps
    Configure 
    BlackBerry Work
     when your organization is using 
    BEMS
    1. On the Configuration Settings tab, select 
      Clients must have individual login certificates (SSL) uploaded in the GC
      .
    2. To enable automatic discovery of the 
      Microsoft Exchange
       server that the users are on, select 
      Use BEMS to perform Autodiscover of the EAS/EWS endpoint for the user
      .
    3. On the 
      Exchange Settings
       tab, in the 
      User Credential Profile Name
       field, type the name of the user credential profile.
    Configure 
    BlackBerry Work
     when your organization is not using 
    BEMS
    1. Select the 
      Exchange Settings
       tab.
    2. If your server uses the 
      domain name\user
       login format, in the 
      Default Domain
       field, specify the default 
      Windows NT
       Domain that 
      BlackBerry Work
       connects to when users log in.
    3. In the 
      Active Sync Server
       field, specify the default 
      Exchange ActiveSync
       server that 
      BlackBerry Work
       connects to when users log in to 
      BlackBerry Work
       (for example, cas.mydomain.com).
    4. In the 
      Auto Discover URL
       field, specify the auto discover URL if known. This speeds up the autodiscover setup process (for example, https://autodiscover.mydomain.com).
    5. In the 
      Auto Discover Connection Timeout in Seconds (iOS only)
       field, specify the autodiscover connection timeout in seconds.
    6. In the 
      User Credential Profile Name
       field, type the name of the user credential profile.
  5. Click 
    Save
    .