Skip Navigation

Preinstallation and preupgrade requirements

Review the following checklists before you begin installing or upgrading

BlackBerry UEM

.

Hardware requirements
Review and complete the Performance Calculator for BlackBerry UEM. The performance calculator provides minimum recommendations based on the values you enter. If you require additional capacity, redundancy, or room for growth, enter values that reflect these needs to accommodate any near future large app and user deployment projects.
Ensure your environment meets the hardware requirements for your needs.
Ensure that database latency requirements are met. BlackBerry UEM Core servers must have less than 5ms latency to the database server.

Third-party software requirements
Verify that your computer is running an operating system that supports BlackBerry UEM.
Verify that you have a supported browser on the computers that host the UEM management console. The browser must support configuration of the following settings: Support for JavaScript Cookies turned on Support for TLS SSL certificate installed to permit trusted connections to the consoles
If you have a requirement to use a proxy server in your organization, verify that you have a supported proxy solution.
Ensure that Windows is up to date and that you perform any reboot required for the update.
Verify that your computer is running Windows PowerShell 2.0 or later for the following: RRAS for BlackBerry Secure Connect Plus setup during the UEM installation Exchange ActiveSync gatekeeping (optional)
Verify that you have installed JRE 17 on the servers where you will install UEM . Visit support.blackberry.com to review article 52117. For more information about supported JRE versions, see the Compatibility matrix.
Verify that you have a mail server that supports BlackBerry UEM.
Verify that the Exchange ActiveSync version meets the minimum requirements.

Environment configuration requirements
Verify that the BlackBerry UEM listening ports are configured.
Verify that you opened the necessary ports on your organization's firewall. For more information about port and firewall requirements, visit support.blackberry.com/community to read article 36470. BlackBerry UEM services do not support SSL Termination, SSL Offloading, SSL Packet Inspection or Deep Packet Inspection. Ensure these endpoint services are not enabled on your proxy/firewall.
Verify that the TCP/IP network protocols are turned on for your UEM database.
Verify that you have DNS support for resolving IP addresses into host names.
If you perform the installation or upgrade process on a computer that has more than one NIC, verify that the production NIC is first in the bind order in the Windows network settings.
If a Windows host operating system is configured in a workgroup instead of a domain, verify that you configured the primary DNS suffix. For information on configuring the primary DNS suffix, visit the Microsoft support website.
Ensure that the no count setting for the Microsoft SQL Server is disabled.
Verify that the UEM service account has local administrator permissions on each computer.
The Microsoft SQL Server account must have dbo as its default schema.
Ensure antivirus exclusions have been made for both the extracted installation files and the target installation and logging directories. For more information, visit support.blackberry.com/community to read article 36596.
If you previously upgraded from a legacy Good Control environment and modified the Java Heap value, make note of the existing value. You will need to reapply the change after upgrade. For more information, visit support.blackberry.com/community to read article 56641.

Additional considerations
If you plan to install BlackBerry UEM in a DMZ, read Installing BlackBerry UEM in a DMZ.
Plan for an appropriate amount of downtime based on the number of servers in your environment. Upgrading the first server may take 45-60 minutes. Additional servers may take 15-45 minutes depending on which components are installed and whether or not these components can be installed in parallel. Consider adding additional time to account for rolling back servers if troubleshooting is required.
Verify that you have the appropriate licenses.
Visit support.blackberry.com/community to review article 38980 about upgrades.
If your organization uses a proxy server for Internet access, verify that you have the computer name, port number, and credentials for the proxy server.
If your organization uses Apple VPP accounts, after the upgrade you must generate a new .vpp token file and edit your Apple VPP account information at Apps > iOS App licenses.
If you are planning a multistage upgrade, review the upgrade documentation for the versions you are upgrading to.
Decommission surplus nodes, if applicable. For more information, visit support.blackberry.com/community to read article 46210 and see the Installation and upgrade content for instructions on how to remove BlackBerry UEM software.