Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.18
  3. Administration
  4. Securing connections using PKI
  5. Managing client certificates for user accounts
  6. Add a client certificate to a user account

Add a client certificate to a user account

You can add a client certificate to an individual user account and send the certificate to
BlackBerry Dynamics
 enabled devices or other managed
iOS
 and
Android
 devices.
Add client certificates to user accounts when users devices need certificates for S/MIME or client authentication and the certificate can't be sent to devices via a user credential profile or SCEP profile.
The client certificate must have a .pfx or .p12 file name extension. You can send more than one client certificate to devices.
You can also use user credential profiles to upload certificates for individual users. User credential profiles can be associated with a
Wi-Fi
, VPN, or email profile.
  1. On the menu bar, click
    Users > Managed devices
    .
  2. Search for a user account.
  3. In the search results, click the name of a user account.
  4. In the
    IT policy and profiles
     section, click The Add icon.
  5. Click
    User certificate
    .
  6. Type a description for the certificate.
  7. In the
    Apply certificate to
     section, select one of the following:
    • Other managed devices
      : Choose this option to send the certificate to
      iOS
       and
      Android
       devices for all supported uses other than for
      BlackBerry Dynamics
       apps.
    • BlackBerry Dynamics enabled devices
      : Choose this option to send the certificate to devices to use with
      BlackBerry Dynamics
       apps.
  8. In the
    Certificate file
     field, click
    Browse
     to locate the certificate file.
  9. If you selected
    Other managed devices
    , in the
    Password
     field, type a password for the certificate. For
    iOS
     devices, a password is required. For
    Android
     devices, you do not have to provide a password in
    BlackBerry UEM
     if the device is running the latest version of
    BlackBerry UEM Client
    . If you don't set a password, the user must enter the device password.
  10. Click
    Add
    .
    The certificate is listed in the
    User certificates
     table on the user summary page.
For
BlackBerry Dynamics
 enabled devices, configure the length of time uploaded certificates remain on the
BlackBerry UEM
 server before they are automatically deleted from the server. The default setting is 24 hours.