UEM Cloud

known issues

After you upgrade from

BlackBerry UEM

12.17.1(a) to 12.18, device groups that include RSR versions are not updated automatically. (EMM-152033)

Workaround

: Edit the device groups manually and save.

For

iOS

devices, RSR versions might be included in device groups that are intended to filter for a specific version and earlier or later versions. (EMM-152028)

If a 

Knox Service Plugin

(KSP) policy is set to disable factory reset on a device and an administrator sends an IT command to wipe the device from

BlackBerry UEM

, the device will be unmanaged and cannot be reactivated or complete a factory reset. (EMA-17549)

Workaround

:  If devices are assigned a KSP policy that disables factory reset, create a KSP policy that allows it and assign the policy to the devices before you send the wipe command. For more information, visit https://docs.samsungknox.com/admin/knox-service-plugin/kbas to read article 844.

After you set up

Chrome OS

device management and click on the Network tab for an org unit, an error message stating that the profile could not be retrieved might be displayed. (EMM-151438)

After you remove

Apple

VPP apps from a device and unassign them from the user, the license consumption counts are not updated in the

UEM

management console. (EMM-151299)

Chrome OS

devices will not synchronize with

BlackBerry UEM

if they are in an org unit that has no child org units. (EMM-150375)

Workaround

: If the user is enrolling only in conditional access, they shouldn't open the

Microsoft Authenticator

app from the app store after they install it, instead they should switch to the

BlackBerry UEM Client

and then open the

Microsoft Authenticator

app.

On some devices that are configured for ZSO authentication, when the user signs in to the ZSO service through the browser, a notification prompt appears unexpectedly to choose a certificate for authentication. (EMM-147606)

Workaround

: Choose the "_Cirrus_SCEP_Profile_" option.

In dark site environments, when activating a

Samsung Galaxy S

20 device running

Android

11 with the

Work and personal - full control

(

Android Enterprise

) activation type with the premium option enabled, the device activates with the

Android Enterprise

workspace instead of the

Knox

workspace. (EMA-16736)

Users might not be prompted to set a workspace password during "

Work and personal - user privacy

(

Android Enterprise

)" activation. (EMA-16279)

If your organization uses PKI and

Entrust

smart credentials together, users might need to enroll the PKI certificate multiple times on the same device (maximum of once per app). (GD-35783)