Sending CA certificates to devices and apps

You might need to send CA certificates to devices if your organization uses S/MIME or if devices or 

BlackBerry Dynamics

 apps use certificate-based authentication to connect to a network or server in your organization’s environment.

When a CA certificate is stored on a device, the device and apps trust the identity associated with any client or server certificate signed by the CA. When the certificate for the CA that signed your organization's network and server certificates is stored on devices, device and apps can trust your networks and servers when they make secure connections. When the CA certificate that signed your organization's S/MIME certificates is stored on devices, the email client can trust the sender's certificate when a secure email message is received.

Multiple CA certificates that are used for different purposes can be stored on a device. You can use CA certificate profiles to send CA certificates to devices.