BlackBerry
Dynamics global properties
BlackBerry
Dynamics
global propertiesThe following tables describe the
BlackBerry
Dynamics
global properties that you can configure.The Restart column indicates whether changing the property requires a restart of
BlackBerry UEM
.If a property is displayed in the management console but is not documented here, it is a deprecated property that is no longer in use.
Certificate Management
Property | Description | Default | Restart |
---|---|---|---|
Time-to-live in seconds for the keystore for individual end-users' PKCS 12 certificates | The lifespan (time-to-live), in seconds, of the keystore for the PKCS 12 certificates that device users can upload to sign email messages and for client authentication. This property is read-only. You cannot change it. | 86400 | — |
Communication
Communication
Property | Description | Default | Restart |
---|---|---|---|
cntmgmt.internal.port | The internal port for the container management service. | Null (defaults to 17317) | Yes |
cntmgmt.max.conns.above.limit | The maximum number of connections that are allowed in excess of the limit set by the cntmgmt.max.conns.persec property. Do not change this setting without consulting BlackBerry Technical Support. | 3 | Yes |
cntmgmt.max.conns.persec | The maximum number of connections per second for container management. Do not change this setting without consulting BlackBerry Technical Support. | 30 | Yes |
cntmgmt.max.active.sessions | The maximum number of active sessions for container management. | 10000 | Yes |
cntmgmt.max.idle.count | The maximum number of idle connections that are permitted for container management. Do not change this setting without consulting BlackBerry Technical Support. | 0 | Yes |
cntmgmt.max.read.throughput | The maximum number of concurrent read operations for container management. Do not change this setting without consulting BlackBerry Technical Support. | 500 | Yes |
cntmgmt.max.write.throughput | The maximum number of concurrent write operations for container management. Do not change this setting without consulting BlackBerry Technical Support. | 500 | Yes |
cntmgmt.ssl.external.enable | Controls whether SSL is enabled for external container management. | On | Yes |
cntmgmt.ssl.internal.enable | Controls whether SSL is enabled for internal container management. | On | Yes |
Duplicate Containers
Duplicate Containers
If
BlackBerry UEM
identifies duplicate containers on devices, it schedules batch jobs to remove them. A duplicate container has the same user ID and entitlement ID (also known as the BlackBerry
Dynamics
App ID) as another container on the same device. When a duplicate container is removed, it is recorded in the BlackBerry UEM
log file.Property | Description | Default | Restart |
---|---|---|---|
Automatically remove older duplicate containers on same device for the user after provisioning. | Specify whether BlackBerry UEM automatically removes duplicate containers when a new version of an app is provisioned. If this setting is selected, it takes precedence over the other Duplicate Container properties. | On | No |
Enable job to automatically remove duplicate containers (on/off) | Specify whether BlackBerry UEM automatically schedules jobs to identify and remove duplicate containers from devices. | On | No |
Inactivity timeout in seconds before duplicate container is deleted | The amount of time, in seconds, that a duplicate container must be inactive before BlackBerry UEM schedules a job to remove it. | 259200 | No |
Frequency in seconds that job to remove duplicate containers will run | How often, in seconds, BlackBerry UEM runs a job to identify and remove duplicate containers. | 86400 | No |
Maximum number of containers to remove in a single job | The maximum number of inactive containers that a single job can remove from devices | 100 | No |
Kerberos Constrained Delegation
Kerberos
Constrained DelegationProperty | Description | Default | Restart |
---|---|---|---|
Use explicit UPN | Specify whether BlackBerry
Dynamics apps use an explicit UPN or implicit UPN while authenticating to services integrated with Microsoft Active
Directory or Exchange ActiveSync in Office
365 . Your organization's Active
Directory may support both options or only one of the options, depending on your environment. | Off | No |
Enable KCD (gc.krb5.enabled) | Specify whether BlackBerry UEM supports Kerberos Constrained Delegation for BlackBerry
Dynamics apps. | Off | Yes |
Miscellaneous
Miscellaneous
Property | Description | Default | Restart |
---|---|---|---|
config.command.expiry | How long BlackBerry UEM waits, in seconds, before resending an unacknowledged message. | 60 | Yes |
config.command.retry | How often, in seconds, BlackBerry UEM runs the task to identify and resend unacknowledged messages. If set to 0, BlackBerry UEM does not run the task. | 900 | Yes |
gc.entgw.report.userinfo | Specify whether user display names are reported to the BlackBerry
Dynamics NOC. | Off | No |
policy.compliance.interval | How often, in minutes, BlackBerry UEM retrieves compliance policies for all policy sets from the BlackBerry
Dynamics . | 1440 | Yes |
Purge Inactive Containers
Purge Inactive Containers
If
BlackBerry UEM
identifies inactive containers on devices, it schedules batch jobs to remove them. BlackBerry UEM
considers a container to be inactive if it has not connected to BlackBerry UEM
for a default period of 90 days. When an inactive container is removed, it is recorded in the BlackBerry UEM
log file.Containers that have an authentication delegate configured are not purged by this process.
Property | Description | Default | Restart |
---|---|---|---|
Enable job to automatically remove inactive containers (on/off) | Specify whether BlackBerry UEM automatically schedules jobs to identify and remove inactive containers from devices. | Off | No |
Container inactivity interval in seconds | The amount of time, in seconds, before BlackBerry UEM considers a container to be inactive. | 7776000 | No |
Frequency in seconds that job to remove inactive containers will run | How often, in seconds, BlackBerry UEM runs a job to identify and remove inactive containers. | 86400 | No |
Maximum number of containers to remove in a single job | The maximum number of inactive containers that a single job can remove from devices. | 100 | No |
Reporting
Reporting
Property | Description | Default | Restart |
---|---|---|---|
Set limit for records returned in exportable reports to prevent out of memory condition. | The maximum number of lines that can be included in a report. The maximum value that can be entered is 1000000. | 5000 | No |
Retention Data Policy
Retention Data Policy
Property | Description | Default | Restart |
---|---|---|---|
Log read operations in the database | Whether BlackBerry Control logs read operations in the BlackBerry Control database. | On | Yes |
Purge server jobs | Specify whether BlackBerry UEM automatically purges server jobs at a regular interval. | On | Yes |
Purge server jobs interval (In Days) | If “Purge server jobs” is on, how often, in days, BlackBerry UEM purges server jobs. | 30 | Yes |