Protecting email data sent to
iOS
devices using the
BlackBerry Secure Gateway

You can use the

BlackBerry Secure Gateway

to protect email data and allow

iOS

and

iPadOS

devices to send and receive work email. The gateway provides a secure connection through the

BlackBerry Infrastructure

and

BlackBerry UEM

to your organization's mail server without requiring you to expose your mail server outside the firewall or locate your mail server in a DMZ.

The devices must be activated with the

MDM controls

activation type.

Step	Action
	In the email profile, select the "Enable BlackBerry Secure Gateway " setting.
	If your environment includes iOS or iPadOS 13.0 or later devices and your organization's mail server is configured to use modern authentication (OAuth): In the email profile, select the "Use OAuth for authentication" setting. Configure BlackBerry UEM to trust the Exchange ActiveSync server or identity provider certificate Configure the BlackBerry Secure Gateway to use OAuth with the mail server.
	If you configured server groups to support regional connections to the BlackBerry Infrastructure and direct BlackBerry Secure Gateway traffic, select the appropriate server group the "BlackBerry Secure Gateway Service server group" setting in the email profile.