Dynamics: SCEP profile settings
BlackBerry Dynamics: SCEP profile settings
These settings apply to SCEP certificates used with
BlackBerry Dynamicsapps on
BlackBerry Dynamics: SCEP profile setting
This setting specifies the subject for the certificate, if required for your organization's SCEP configuration. Type the subject in the format "/CN=
<domain_name>" If the profile is for multiple users, you can use a variable, for example: %UserDistinguishedName%.
This setting specifies the subject alternative name type for the certificate, if it is required.
This setting specifies the subject alternative representation of the certificate subject. The value must be an email address, the DNS name of the CA server, the fully qualified URL of the server, or principal name.
The "SAN type" setting determines the appropriate value to specify. If set to "RFC822 name," the value must be a valid email address. If set to "URI," the value must be a valid URL that includes the protocol and FQDN or IP address. If set to "NT principal name," the value must be a valid principal name. If set to "DNS name," the value must be a valid FQDN.
This setting specifies the algorithm used to generate the client key pair. You must select an algorithm that is supported by your CA.
This setting specifies the
RSAstrength used to generate the client key pair. You must enter a key strength that is supported by your CA.
This setting is valid only if the "Key algorithm" setting is set to "
This setting specifies the encryption algorithm used for the certificate enrollment request.
This setting specifies the hash function used for the certificate enrollment request.
This setting specifies the hexadecimal-encoded hash of the root certificate for the CA. You can use one of the following algorithms to specify the thumbprint: SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512. MD5 is supported only if "Enable FIPS" is not selected in the
This setting specifies how many days before a certificate expires that automatic certificate renewal occurs.
This setting specifies the cryptographic operations that can be performed using the public key that is contained in the certificate.
Extended key usage
This setting specifies the purpose of the key that is contained in the certificate.
This setting specifies which
BlackBerry Dynamicsapps can use the certificate.
Apps allowed to use SCEP
This setting specifies the
BlackBerry Dynamicsapps that are allowed to use SCEP certificates.
This setting is valid only if the "App restrictions" setting is set to "Allow specified apps to use certificates."
Delete expired certificates
This setting specifies whether the device deletes expired certificates.
Remove duplicate certificates
This setting specifies whether the device deletes duplicate certificates. The device deletes the certificate that has the earliest start date.