Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Administration
  4. Securing connections using PKI
  5. Managing client certificates for user accounts
  6. Add a client certificate to a user account

Add a client certificate to a user account

You can add a client certificate to an individual user account and send the certificate to 
BlackBerry Dynamics
 enabled devices or other managed 
iOS
 and 
Android
 devices.
Add client certificates to user accounts when users devices need certificates for S/MIME or client authentication and the certificate can't be sent to devices via a user credential profile or SCEP profile.
The client certificate must have a .pfx or .p12 file name extension. You can send more than one client certificate to devices.
You can also use user credential profiles to upload certificates for individual users. User credential profiles can be associated with a 
Wi-Fi
, VPN, or email profile.
  1. On the menu bar, click 
    Users > Managed devices
    .
  2. Search for a user account.
  3. In the search results, click the name of a user account.
  4. In the 
    IT policy and profiles
     section, click The Add icon. 
  5. Click 
    User certificate
    . 
  6. Type a description for the certificate.
  7. In the 
    Apply certificate to
     section, select one of the following:
    • Other managed devices
      : Choose this option to send the certificate to 
      iOS
       and 
      Android
       devices for all supported uses other than for 
      BlackBerry Dynamics
       apps.
    • BlackBerry Dynamics enabled devices
      : Choose this option to send the certificate to devices to use with 
      BlackBerry Dynamics
       apps.
  8. In the 
    Certificate file
     field, click 
    Browse
     to locate the certificate file.
  9. If you selected 
    Other managed devices
    , in the 
    Password
     field, type a password for the certificate. For 
    iOS
     devices, a password is required. For 
    Android
     devices, you do not have to provide a password in 
    BlackBerry UEM
     if the device is running the latest version of 
    BlackBerry UEM Client
    . If you don't set a password, the user must enter the device password.
  10. Click 
    Add
    .
    The certificate is listed in the 
    User certificates
     table on the user summary page.