Skip Navigation

Add a client certificate to a user account

You can add a client certificate to an individual user account and send the certificate to
BlackBerry Dynamics
enabled devices or other managed
Add client certificates to user accounts when users devices need certificates for S/MIME or client authentication and the certificate can't be sent to devices via a user credential profile or SCEP profile.
The client certificate must have a .pfx or .p12 file name extension. You can send more than one client certificate to devices.
You can also use user credential profiles to upload certificates for individual users. User credential profiles can be associated with a
, VPN, or email profile.
  1. On the menu bar, click
    Users > Managed devices
  2. Search for a user account.
  3. In the search results, click the name of a user account.
  4. In the
    IT policy and profiles
    section, click The Add icon.
  5. Click
    User certificate
  6. Type a description for the certificate.
  7. In the
    Apply certificate to
    section, select one of the following:
    • Other managed devices
      : Choose this option to send the certificate to
      devices for all supported uses other than for
      BlackBerry Dynamics
    • BlackBerry Dynamics enabled devices
      : Choose this option to send the certificate to devices to use with
      BlackBerry Dynamics
  8. In the
    Certificate file
    field, click
    to locate the certificate file.
  9. If you selected
    Other managed devices
    , in the
    field, type a password for the certificate. For
    devices, a password is required. For
    devices, you do not have to provide a password in
    BlackBerry UEM
    if the device is running the latest version of
    BlackBerry UEM Client
    . If you don't set a password, the user must enter the device password.
  10. Click
    The certificate is listed in the
    User certificates
    table on the user summary page.
BlackBerry Dynamics
enabled devices, configure the length of time uploaded certificates remain on the
BlackBerry UEM
before they are automatically deleted from the server. The default setting is 24 hours.