Known issues in

UEM

12.20 and

UEM Cloud

(June 2024)

If you configured

UEM

to connect to more than one

Microsoft Active Directory

instance, when you search for a user account to add from

Active Directory

,

UEM

may not find the user account as expected because it searches the wrong

Active Directory

instance. This issue occurs intermittently. For more information, see KB 140181. (EMM-157231)

Workaround

: Search for the user again until

UEM

connects to the correct

Active Directory

instance.

In a

UEM Cloud

environment, if you make changes to an LDAP directory connection and save, an error message is displayed and you cannot save your changes until you upload the LDAP server SSL certificate again. (EMM-156343)

In the compliance events view (Users > Compliance violations), if you select a resolved event and click the Ignore button, the event is not removed from the view or added to the list of Ignored events. (EMM-156329)

When you add an app group to a device group with a required disposition and save, the disposition changes to optional. (EMM-156069)

If a user deactivates a device with an

Android Management

activation type from the device settings, the device still displays as activated in the management console. (EMM-153468)

When you send the Delete only work data command to an

iOS

device that is activated with User privacy, the request times out and an error message is displayed. (EMM-153457)

Workaround

: Use the Remove device command.

After you set up

Chrome OS

device management and click on the Network tab for an org unit, an error message stating that the profile could not be retrieved might be displayed. (EMM-151438)

When you are configuring

Entra ID

Conditional Access, an error message might display and the configuration might not complete successfully due to a timeout. (SIS-15834)

Workaround

: Click OK on the error message, click Save on the

Entra ID

Conditional Access page, and complete the configuration steps again.

If a user’s

iOS

device is already activated with

UEM

and you enable that user for

Entra ID

conditional access, after the

Microsoft Authenticator

app is installed and the user brings the

UEM Client

to the foreground, the

Microsoft

authentication screen is not displayed to the user as expected. This is due to a

Microsoft

known issue. (EMA-18313)

Workaround

: Instruct users to force close the

UEM Client

and open it again.

If a

Knox Service Plugin

(KSP) policy is set to disable factory reset on a device and you send an IT command to wipe the device from

UEM

, the device will be unmanaged and cannot be reactivated or complete a factory reset. (EMA-17549)

In dark site environments, when activating a

Samsung Galaxy S

20 device running

Android

11 with the

Work and personal - full control

(

Android Enterprise

) activation type with the premium option enabled, the device activates with the

Android Enterprise

workspace instead of the

Knox

workspace. (EMA-16736)

When you send the Delete all device data command to a device activated with an

Android Management

activation type, a SQL exception error may be displayed in the management console, but the command executes as expected on the device. This issue occurs intermittently. (EMM-156357)

When you configure a device profile with different wallpapers for the home screen and the lock screen and you assign the profile to an

iOS

device, the wallpaper configuration may not be applied to the device as expected. This issue occurs intermittently. (EMM-155689)

Samsung

devices that are activated with

Android Enterprise

Work space only and are assigned an Enterprise connectivity profile cannot send or receive SMS or MMS messages. (EMM-154287)

Workaround

: In the Enterprise connectivity profile settings, on the

Android

tab, select Container-wide VPN and add the com.android.mms.service and com.google.android.apps.messaging apps to the list of apps restricted from using

BlackBerry Secure Connect Plus

.

When you schedule an OS update for one or more supervised iOS devices, the update is delivered to devices but is not installed. This occurs intermittently and is due to an

iOS

known issue. (EMM-152977)

Chrome OS

devices will not synchronize with

UEM

if they are in an org unit that has no child org units. (EMM-150375)

During the

Entra ID

Conditional Access enrollment flow, the user might be prompted to register the device twice. (SIS-15411)

Workaround

: If the user is enrolling only in conditional access, they shouldn't open the

Microsoft Authenticator

app from the app store after they install it, instead they should switch to the

BlackBerry UEM Client

and then open the

Microsoft Authenticator

app.

If you enable an encrypted connection and communication between UEM and Microsoft SQL Server, the encrypted connection can result in an increase in the UOS CPU on the computer that hosts the

BlackBerry UEM Core

. (EMM-155875)