Skip Navigation

Minimum ports to open between
BlackBerry UEM
instances

If your organization’s domain has more than one
BlackBerry UEM
instance, note the following requirements:
  • If you install the device connectivity components (the
    BlackBerry Connectivity Node
    ) on a separate computer, your organization's firewall must allow connections from that computer over port 443 through the
    BlackBerry Infrastructure
    (
    <region>
    .bbsecure.com) to activate the
    BlackBerry Connectivity Node
    . All other outbound connections from the
    BlackBerry Connectivity Node
    use port 3101 through the
    BlackBerry Infrastructure
    (
    <region>
    .bbsecure.com).
  • If you are migrating data from one
    BlackBerry UEM
    instance to another, the ports that must be open between the source and destination servers are 8887 (TCP) and 35844 (TCP) for
    BlackBerry UEM
    and static ports 1433 (TCP) and 1434 (UDP) for
    Microsoft SQL Server
    .
  • The following listening ports must be open between each instance. The default port values are listed. After you install the first instance, you can verify the listening port values that the setup application defined. For instructions, see Check the ports assigned by the BlackBerry UEM setup application.
Default port
Name in database
Purpose
8000
443
ui.port.ssp
ui.port.admin
BlackBerry UEM Self-Service
and the management console listen for HTTPS connections on this port.
If 443 is not available, the setup application tries to use port 8008. If port 8008 is not available, the setup application assigns a port from the range of 12000 to 12999.
8448
ui.port.internal-api
The
BlackBerry UEM Core
, the management console, and
BlackBerry UEM Self-Service
use this port for internal communication.
8887
tomcat.ipc.https.port
BlackBerry UEM
uses this port for authenticated connections to check the status of
BlackBerry UEM
instances.
8896
tomcat.dynamics.apps.https.port
BlackBerry UEM
listens on this port for REST requests from
BlackBerry Dynamics
apps. This port uses GDAuthToken-based authentication.
17080
good.proxy.appservers.http.listening.port
BlackBerry Proxy
listens on this port for connections from application servers.
The default port value must be used. The setup application does not assign an alternate port value if the default port is not available.
17317
good.control.container.management.listening.port
BlackBerry Control
listens on this port for
BlackBerry Dynamics
container management data.
The default port value must be used. The setup application does not assign an alternate port value if the default port is not available.
17433
good.proxy.appservers.ssl.listening.port
BlackBerry Proxy
listens on this port for SSL connections from application servers.
The default port value must be used. The setup application does not assign an alternate port value if the default port is not available.
17533
good.proxy.container.ssl.listening.port
BlackBerry Proxy
listens on this port for SSL connections.
The default port value must be used. The setup application does not assign an alternate port value if the default port is not available.