Considerations for changing BlackBerry Dynamics certificates
    Review the following considerations if you want to change any of the 
BlackBerry
        Dynamics
 SSL certificates. If problems occur when you change a certificate, communication between BlackBerry UEM
 components and between UEM
 and BlackBerry
        Dynamics
 apps could be disrupted. Plan and test certificate changes carefully.Consideration  | Details  | 
|---|---|
Add new certificates to peripheral equipment  | If you have added  BlackBerry
        Dynamics  certificates to peripheral equipment on your network, add the new certificate to peripheral equipment before adding it to UEM . | 
Use the latest versions of  BlackBerry
        Dynamics  apps | If you are replacing the  BlackBerry
        Dynamics  certificate for application management or Direct Connect , ensure that users are using the latest available version of BlackBerry
        Dynamics  apps before you replace the certificate. | 
BlackBerry
        Dynamics  apps must be open to receive a certificate | A user must open a  BlackBerry
        Dynamics  app on their device for it to receive a certificate from UEM . If you are replacing the BlackBerry
        Dynamics  certificate for application management or Direct Connect  and the change becomes effective before UEM  pushes the certificate to all BlackBerry
        Dynamics  apps, any apps that did not receive the certificate must be reactivated. Apps do not receive certificates while they are suspended on iOS  devices or while Android  devices are in Doze mode. | 
Verify that the  BlackBerry Connectivity Node  is accessible | If any  BlackBerry Proxy  instances are unreachable by UEM  when BlackBerry
        Dynamics  certificates are replaced, BlackBerry
        Dynamics  apps will not be able to connect to those instances following the certificate replacement. | 
Scheduling certificate changes  | If you are replacing the certificate for  BlackBerry
        Dynamics  servers, choose a period of low activity to restart the servers.Allow sufficient time for new certificates to propagate to  BlackBerry Proxy  and BlackBerry
        Dynamics  apps. If you are replacing only the certificate for BlackBerry
        Dynamics  servers, allow at least 10 minutes before the server restarts. |