Skip Navigation

Change a
BlackBerry UEM
certificate

  • Obtain a certificate signed by a trusted CA. The certificate must be in a keystore format (.pfx, .pkcs12), and must be encrypted with the TripleDES-SHA1 encryption type. For more information, visit support.blackberry.com to read KB 69494.
  • If you are replacing the
    BlackBerry Dynamics
    certificate for application management or
    Direct Connect
    , ensure that users'
    BlackBerry Dynamics
    apps are updated to the most recent versions first.
  1. On the menu bar, click
    Settings > Infrastructure > Server certificates
    .
  2. In the section for the certificate that you want to replace, click
    View details
    .
  3. Click
    Replace certificate
    .
  4. Browse to the certificate file and select it.
  5. Enter an encryption password for the certificate.
  6. If you are replacing the certificate for
    BlackBerry Dynamics
    servers, specify when you want
    BlackBerry UEM
    to restart to make the change effective.
    It is recommended that you choose a period of low activity to restart the servers.
  7. If you are replacing the
    BlackBerry Dynamics
    certificate for application management or
    Direct Connect
    , specify the effective date for the certificate change.
    It is recommended that the effective date be further away than the Connectivity verification "Last contact time" setting in the compliance profile. If you are changing more than one certificate, you should separate the effective times by at least 30 minutes. Note that there is no prompt for the effective date when the new certificate is issued by the same CA as the previous certificate. For more information, visit support.blackberry.com/community to read article 74167.
  8. Click
    Replace
    .
  • If you replaced any of the certificates on the
    Server certificates
    tab, restart the
    BlackBerry UEM Core
    service on all servers. It is recommended that you choose a period of low activity to restart the servers.
  • For certificates on the
    BlackBerry Dynamics
    certificates tab, you can click
    Revert to default
    to switch back to using a self-signed certificate.
  • On the
    BlackBerry Dynamics
    certificates tab, you can clear the
    Trust BlackBerry UEM CA
    and
    Trust BlackBerry Dynamics CA
    check boxes if you have no further need to trust the self-signed certificates. You can clear the
    Trust BlackBerry Dynamics CA
    check box only if you have replaced all of the certificates on the
    BlackBerry Dynamics
    certificates tab.
  • If
    BlackBerry Dynamics
    apps stop communicating after you change the certificates, ensure that the apps are up to date and then instruct users to reactivate the apps.