Skip Navigation

Managing secure connections with
BlackBerry UEM

The following table summarizes the administration tasks that are covered in this guide. Review to determine which tasks you should complete based on your organization's needs.

Task	Description
Create a Wi-Fi profile	You can create a Wi-Fi profile to specify how devices connect to a work Wi-Fi network.
Create a VPN profile	You can create a VPN profile to specify how devices connect to a work VPN.
Create a per-app VPN profile	You can specify which apps on devices must use a VPN for their data in transit.
Create a proxy profile	You can specify how devices use a proxy server to access web services on the Internet or on a work network.
Create an enterprise connectivity profile	You can specify how devices connect to your organization’s resources using enterprise connectivity and BlackBerry Secure Connect Plus to provide a secure IP tunnel between apps and your organization's network.
Create a BlackBerry 2FA profile	You can enable two-factor authentication for users and specify the configuration of preauthentication and self-rescue features.
Create a single sign-on extension profile	You can enable iOS and iPadOS devices to authenticate automatically with domains and web services in your organization's network.
Create a BlackBerry Dynamics connectivity profile	You can define the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using BlackBerry Dynamics apps. For more information, see Setting up network connections for BlackBerry Dynamics apps in the Administration content.
Create a DNS profile	You can specify the DNS servers that you want iOS and macOS devices to use to access specified domains.
Create an email profile	You can specify how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data using Exchange ActiveSync or IBM Notes Traveler . For more information, see Creating email profiles in the Administration content.
Create an IMAP/POP3 email profile	You can specify how devices connect to an IMAP or POP3 mail server and synchronize email messages. For more information, see Create an IMAP/POP3 email profile in the Administration content.
Create a network usage profile	You can manage network mobile network usage for iOS and iPadOS apps.
Create a web content filter profile	You can limit the websites that a user can view in Safari or other browsers on a supervised iOS or iPadOS device.
Create an AirPrint profile	You can help users find printers.
Create an AirPlay profile	You can specify which AirPlay devices iOS and iPadOS users can connect to.
Create an Access Point Name profile	You can specify the information Android devices need to communicate with the carrier's network.
Connect the UEM to your organization's PKI software	You can extend the certificate-based authentication provided by your PKI services to the devices and apps that you manage with UEM . For example, you can Connect BlackBerry UEM to your organization’s Entrust software Connect BlackBerry UEM to your organization’s Entrust IdentityGuard server to use smart credentials Connect BlackBerry UEM to your organization's OpenTrust software Connect BlackBerry UEM to a BlackBerry Dynamics PKI connector Connect BlackBerry UEM to your organization’s app-based PKI solution
Send certificates to devices and apps using profiles	You can send certificates to devices and apps using UEM profiles.
Manage client certificates for user accounts	You can add client certificates directly to individual user accounts or to a user credential profile assigned to the user account.