Determining the status of S/MIME certificates on devices

You can use OCSP and CRL profiles to allow

iOS

and

Android

devices to check the status of S/MIME certificates. You can assign an OCSP profile and a CRL profile to user accounts, user groups, or device groups.

iOS

and

Android

devices search each OCSP responder that you specify in an OCSP profile and retrieves the S/MIME certificate status.

iOS

and

Android

devices can send certificate status requests to

BlackBerry UEM

, and you can use CRL profiles to configure

BlackBerry UEM

to search for the status of S/MIME certificates using HTTP, HTTPS, or LDAP.

If you use

Exchange ActiveSync

for certificate retrieval,

iOS

and

Android

devices use

Exchange ActiveSync

to check the status of S/MIME certificates. If you use LDAP for certificate retrieval,

iOS

and

Android

devices use OCSP to check the status of certificates.

iOS

and

Android

devices do not use OCSP profiles. Devices check the OCSP responder within the certificate.

For more information about certificate status indicators, see the user guide for the device to read about secure email icons.