Architecture:

BlackBerry UEM

for dark sites

The

BlackBerry UEM Core

is the central component of the

BlackBerry UEM

architecture. It consists of several subcomponents that are responsible for:

Logging, monitoring, reporting, and management functions
Authentication and authorization services
Scheduling and sending commands, IT policies, and profiles to devices

The

BlackBerry UEM

database is a relational database that contains user account information and configuration information that

BlackBerry UEM

uses to manage devices.

The

BlackBerry Gatekeeping Service

sends commands to

Exchange ActiveSync

to add devices to an allowed list when devices are activated on

BlackBerry UEM

. Unmanaged devices that try to connect to an organization's mail server can be reviewed, verified, and blocked or allowed by an administrator using the

BlackBerry UEM

management console.

The management console and

UEM Self-Service

provide a browser-based user interface for administrator and user access to

BlackBerry UEM

.

You use the management console to manage system settings, users, devices, and apps.

Users can use

UEM Self-Service

to set an activation password and send commands to devices, such as set password, lock device, and delete device data.

Your internal network includes various services that devices and

BlackBerry UEM

can communicate with.

If you are activating

Samsung Knox

devices using

Android Enterprise

activation types, you require a server that contains the

BlackBerry UEM Client

.apk file and a PAC file that prevents devices from attempting to connect to

Google Play

during activation.

If you are managing

Samsung Knox

devices, an on-premises

Samsung Knox

License Management server is installed with

BlackBerry UEM

for dark sites so that

BlackBerry UEM

doesn't have to connect to the web-based

Samsung Knox

License Management System to get license information.

Samsung Knox

devices communicate with the KLM server using your work

Wi-Fi

network.

To manage

iOS

devices,

BlackBerry UEM

must send notifications to devices through an APNs server. When devices receive a notification from APNs, they contact

BlackBerry UEM

for updates.

For information about securing connections to APNs or possible alternatives to using the public APNs, contact your

Apple

support representative.