Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Installation and configuration
  4. Configuration
  5. Migrating users, devices, groups, and other data from a source server
  6. Considerations: Migrating IT policies, profiles, and groups from a source server

Considerations: Migrating IT policies, profiles, and groups from a source server

A migration from a 
BlackBerry UEM
 source copies the following items to the destination database:
  • Selected IT policies
  • Email profiles
  • Wi-Fi
     profiles
  • VPN profiles
  • Proxy profiles
  • BlackBerry Dynamics
     profiles
  • CA certificate profiles
  • Shared certificate profiles
  • Certificate retrieval
  • User credential profiles
  • SCEP profiles
  • CRL profiles
  • OSCP profiles
  • Certification authority settings (Entrust and PKI connector only)
  • Any policies and profiles that are associated with the policies and profiles you select
  • For migration from on-premises 
    BlackBerry UEM
     version 12.12.1 and later only: App configuration settings, 
    BlackBerry Dynamics
     connectivity profiles, and client certificates (app usage).
For groups migrated from 
BlackBerry UEM
, user, role, and software configuration assignments are not migrated. You must manually recreate these assignments on the destination 
BlackBerry UEM
 server.
A migration from a 
Good Control
 (standalone) source copies the following items to the destination database:
  • Policy sets
  • Connectivity profiles
  • App groups
  • App usage (for certificates)
  • Certificates

BlackBerry UEM

When you migrate 
BlackBerry UEM
 IT policies, profiles, and groups to another domain, consider the following guidelines:
Item
Considerations
IT policy passwords
If any of the source IT policies you selected for 
Android
 devices has a minimum password length of less than 4 or more than 16, no 
BlackBerry UEM
 IT policies or profiles can be migrated. Deselect or update the source IT policy and restart the migration.
Profile names
After migration, you must make sure that all SCEP, user credential, shared certificate, and CA certificate profiles have unique names. If two profiles of the same type have the same name, you must edit one of the profile names.
Directory groups
To migrate directory groups, the source database and destination database must each have only one directory configured. This directory must be configured the same way on both the source and destination database. If the directories are not set up this way, directory groups are not migrated.

Apps activated with 
BlackBerry Dynamics

When you migrate security policy sets, connectivity profiles, app groups, and certificates to 
BlackBerry UEM
, consider the following guidelines:
When you migrate connectivity profiles and certificate usage to 
BlackBerry UEM
, consider the following guidelines:
Item
Considerations
Policy sets (
Good Control
 only)
After migration, each 
Good Control
 policy set appears as the following items in 
BlackBerry UEM
:
  • an app configuration for each app in the policy set
  •  security policy
  •  compliance policy
Connectivity profiles
When 
BlackBerry Dynamics
 connectivity profiles are migrated, the values from the App servers tab are not migrated. The values are populated using the default values from the destination 
BlackBerry UEM
 server.
When 
BlackBerry Dynamics
 connectivity profiles are migrated, some of the values from the Infrastructure tab are not migrated. The administrator must manually edit each migrated profile and set the values for the Primary 
BlackBerry Proxy
 cluster and the Secondary 
BlackBerry Proxy
 cluster.
App groups (
Good Control
 only)
The Everyone group is migrated but has no users assigned to it and is not related to the All Users group on the destination 
BlackBerry UEM
 server. The administrator must manually assign it to users if needed.
Apps
If an app entitlement from the source server doesn't exist in the destination server, that app assignment is not migrated. The app group is migrated.
Certificate usage (
BlackBerry UEM
)
Certificate usage is migrated, except for:
  • Certificate usages that already exist on the destination server
  • Non 
    BlackBerry Dynamics
     apps
  • Custom apps from another 
    Good Control
     organization