BlackBerry UEM

profiles

Set up and configure the

Knox Service Plugin

.

Ranked

Activation

Configure device activation settings for users (for example, the activation type and the number and types of devices).

All devices

Ranked

Enable

BlackBerry Dynamics

for users and configure standards for app access, data protection, and logging.

All devices

Ranked

App lock mode

Configure a device to run only apps that you specify.

Supervised

iOS

devices

Samsung Knox

devices activated with MDM

Windows 10

Education and

Windows 10

Enterprise devices

Ranked

Enterprise Management Agent

Configure how devices connect to

UEM

for app or configuration updates.

Ranked

Shared

iPad

Configure an

iPad

device so that it can be shared by multiple users.

Ranked

Compliance

Define the device conditions that are not acceptable in your organization and configure enforcement actions.

All devices

Ranked

Compliance (

BlackBerry Dynamics

)

This is a read-only profile that displays the compliance settings that were imported from

Good Control

into an on-premises

UEM

environment.

All devices

N/A

Device SR requirements

Configure the software release versions that must be installed on devices.

Ranked

Email

Configure how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data.

All devices

Ranked

IMAP/POP3 email

Configure how devices connect to an IMAP or POP3 mail server and synchronize email messages.

All devices

Not ranked

Gatekeeping

Specify the

Microsoft Exchange

servers to use for automatic gatekeeping.

All devices

Ranked

CalDAV

Specify the server settings that devices can use to synchronize calendar information.

Not ranked

CardDAV

Specify the server settings that devices can use to synchronize contact information.

Not ranked

Configure how devices connect to a work

Wi-Fi

network.

All devices

Not ranked

VPN

Configure how devices connect to a work VPN.

All devices

Not ranked

DNS

Specify the DNS servers that devices use to access specific domains.

Ranked

Proxy

Configure how devices use a proxy server to access web services on the Internet or a work network.

Ranked

Enterprise connectivity

Configure how devices can connect to your organization’s resources using enterprise connectivity and whether devices can use

BlackBerry Secure Connect Plus

.

Ranked

BlackBerry Dynamics

connectivity

Configure the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using

BlackBerry Dynamics

apps.

All devices

Ranked

Enable two-factor authentication for users and configure pre-authentication and self-rescue features.

Ranked

Network usage

Configure whether work apps on

iOS

devices can use the mobile network or data roaming.

Ranked

Web content filter

Limit the websites that a user can view on supervised

iOS

devices.

Supervised

iOS

devices

Not ranked

Single sign-on extension

Enable

iOS

devices to authenticate automatically with domains and web services in your organization's network.

Not ranked

Managed domains

Configure

iOS

devices to notify users about sending email outside of trusted domains and restrict the apps that can open documents downloaded from internal domains.

Not ranked

Add printers to users'

AirPrint

printer lists.

Not ranked

Add devices to users'

AirPlay

device lists.

Not ranked

Access Point Name

Specify APNs for devices to use to connect to carriers.

Not ranked

Windows

Information Protection

Configure the

Windows

Information Protection setting in

Windows 10

.

Ranked

Microsoft Intune

app protection

Configure how to protect data in

Office 365

apps.

Not ranked

Location service

Request the location of devices and view approximate device locations on a map.

Ranked

Do not disturb

Block

BlackBerry Work

notifications during off periods.

Ranked

Factory reset protection

Control the factory reset protection feature on

Android

devices.

Ranked

Configure the security features of

CylancePROTECT Mobile for BlackBerry UEM

.

Ranked

Device

Specify the information that displays on devices.

Ranked

Home screen layout

Configure the layout of apps on

iOS

devices.

Ranked

Custom payload

Specify custom device configuration information using payload code.

Not ranked

Per-app notification

Configure notification settings for system apps and apps that you manage with

UEM

.

Supervised

iOS

devices

Ranked

CA certificate

Specify a CA certificate that devices can use to establish trust with a work network or server.

All devices

Not ranked

Shared certificate

Specify a client certificate that devices can use to authenticate users with a work network or server.

Not ranked

User credential

Specify the CA connection that devices use to obtain a client certificate that is used to authenticate with a work network or server.

Not ranked

SCEP

Specify the SCEP server that devices use to obtain a client certificate that is used to authenticate with a work network or server.

All devices

Not ranked

OCSP

Enable devices to check the status of S/MIME certificates.

Ranked

CRL

Configure

UEM

to search for the status of S/MIME certificates.

Ranked

Certificate mapping profile

Specify which client certificates apps must use.

Ranked

Intercede user credential

Enable a device to activate with Intercede MyID to download derived credentials certificates.

Ranked