Integrating 

BlackBerry UEM

 with your organization's PKI software

If your organization uses a PKI solution to issue certificates, you can extend the certificate-based authentication provided by those PKI services to the devices and apps that you manage with 

BlackBerry UEM

.

Entrust

 products (for example, 

Entrust IdentityGuard

 and 

Entrust Authority Administration Services

) and 

OpenTrust

 products (for example, 

OpenTrust

 PKI and 

OpenTrust CMS

) provide CAs that issue client certificates. You can configure a connection with your organization’s PKI software and use profiles to send the CA certificate and client certificates to devices.

For 

BlackBerry Dynamics

 enabled devices, you can also set up a PKI connector that creates a connection between 

BlackBerry UEM

 and a CA server to enroll certificates for 

BlackBerry Dynamics

 apps or use an app that supports app-based certificate enrollment such as 

Purebred

.