iOS

: Email profile settings

This setting specifies whether apps other than the Mail app can use this account to send email messages.

This setting specifies whether a user can send S/MIME protected email messages.

This setting specifies whether a device sends outgoing messages with a digital signature.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies how devices find the certificates required to sign messages.

This setting is valid only if the "Enable S/MIME" setting is selected.

Possible values:

Shared certificate
SCEP
User credential

After you choose the profile type you want to use, you specify the shared certificate, SCEP, or user credential profile.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the shared certificate profile for a client certificate that a device uses to sign email messages.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the SCEP profile that devices can use to retrieve the certificates required to sign email messages using S/MIME.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the user credential profile that devices can use to obtain the client certificates required to sign email messages using S/MIME.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether a user is allowed to turn on or turn off S/MIME signing.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether a user can override signing credentials.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether a device encrypts outgoing email messages with S/MIME encryption.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies how devices find the certificates required to encrypt messages.

Possible values:

Shared certificate
SCEP
User credential

After you select the profile type, you select the shared certificate, SCEP, or user credential profile that you want to use.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the shared certificate profile for a client certificate that a device can use to encrypt email messages.

Devices choose the appropriate certificate for the recipient to encrypt messages using S/MIME.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the SCEP profile that devices can use to retrieve the certificates required to encrypt email messages using S/MIME.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the user credential profile that devices can use to retrieve the client certificates required to encrypt email messages using S/MIME.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether a user can turn on or turn off the encryption setting.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether a user can override S/MIME encryption credentials.

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies whether all email messages must be encrypted when the user sends them (Required), or if the user can choose which messages to encrypt at the time they send them (Allow).

This setting takes effect only if the "Enable S/MIME" setting is selected.

Possible values:

The default value is "Required."

This setting is valid only if the "Enable S/MIME" setting is selected.

This setting specifies the number of days in the past to synchronize email messages and organizer data to a device.

Possible values:

The default value is "7 days."

This setting specifies the VPN profile that is used for this account’s network communication. This setting applies only to

iOS

14 and later and

iPadOS

14 and later devices.

This setting specifies whether devices with the

MDM controls

activation type use the BlackBerry Secure Gateway to connect to the mail server. The

BlackBerry Secure Gateway

provides a secure connection to your organization's mail server through the

BlackBerry Infrastructure

and

BlackBerry UEM

.

If you configured server groups to direct

BlackBerry Secure Gateway

traffic to a specific regional connection to the

BlackBerry Infrastructure

, you must associate the email profile with the appropriate server group.

This setting specifies the type of authentication a device uses to connect to the mail server.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected.

Possible values:

The default value is "None."

This setting specifies the shared certificate profile for the client certificate that a device uses to connect to the mail server.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected and the "Authentication type" setting is set to "Shared certificate."

This setting specifies the associated SCEP profile that a device uses to enroll a client certificate to use for authentication with the mail server.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected and the "Authentication type" setting is set to "SCEP."

This setting specifies the associated user credential profile that a device uses to enroll a client certificate to use for authentication with the mail server.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected and the "Authentication type" setting is set to "User credential."

This setting specifies whether a device uses credentials and a client certificate obtained using the associated SCEP profile to authenticate with the mail server.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected and the "Authentication type" setting is set to "SCEP."

This setting specifies whether the connection should use OAuth for authentication.

This setting specifies the URL that this account should use to sign in to OAuth. When you specify this URL you must specify a host because auto-discovery is not used.

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected.

This setting specifies the URL that this account should use for token requests using OAuth

This setting is valid only if the "Enable BlackBerry Secure Gateway" setting is not selected.

This setting specifies whether a device must use SSL to connect to the mail server.

This setting specifies whether all SSL certificates are accepted.

This setting is valid only if the "Use SSL" setting is selected.

This setting specifies the list of domains that a user can send work email or calendar entries to. For example, when a user adds a recipient who has an email address in the allowed domain to an email message or calendar entry, no warning message is displayed. This setting applies to the work space only.

If you list multiple domain names, separate the domain names with a comma (,), semicolon (;), or space.

This setting specifies the list of domains that users cannot send work email or calendar entries to. For example, if a user tries to add a recipient with an email address from the restricted domain to an email message or calendar invitation, the

Work Connect

app prevents the user from completing the task. This setting applies to the work space only.

If you list multiple domain names, separate the domain names with a comma (,), semicolon (;), or space.

This setting specifies whether users can access their work email on the device.

This setting specifies whether users can access their work contacts on the device.

This setting specifies whether users can access their work calendar on the device.

This setting specifies whether users can access their work reminders on the device.

This setting specifies whether users can access their work notes on the device.

This setting specifies whether users can change whether access to work email is enabled or disabled on the device.

This setting specifies whether users can change whether access to work contacts is enabled or disabled on the device.

This setting specifies whether users can change whether access to their work calendar is enabled or disabled on the device.

This setting specifies whether users can change whether access to their work reminders is enabled or disabled on the device.

This setting specifies whether users can change whether access to their work notes is enabled or disabled on the device.