Skip Navigation

BlackBerry Dynamics
: SCEP profile settings

These settings apply to SCEP certificates used with

BlackBerry Dynamics

apps on

iOS

and

Android

devices.

BlackBerry Dynamics : SCEP profile setting	Description
Subject	This setting specifies the subject for the certificate, if required for your organization's SCEP configuration. Type the subject in the format "/CN=`<common_name>`,O=`<domain_name>`" If the profile is for multiple users, you can use a variable, for example: "/CN=%UserDistinguishedName%,%UserDistinguishedName%...".
SAN type	This setting specifies the subject alternative name type for the certificate, if it is required.
SAN value	This setting specifies the subject alternative representation of the certificate subject. The value must be an email address, the DNS name of the CA server, the fully qualified URL of the server, or principal name. The "SAN type" setting determines the appropriate value to specify. If set to "RFC822 name," the value must be a valid email address. If set to "URI," the value must be a valid URL that includes the protocol and FQDN or IP address. If set to "NT principal name," the value must be a valid principal name. If set to "DNS name," the value must be a valid FQDN.
Key algorithm	This setting specifies the algorithm used to generate the client key pair. You must select an algorithm that is supported by your CA.
RSA strength	This setting specifies the RSA strength used to generate the client key pair. You must enter a key strength that is supported by your CA. This setting is valid only if the "Key algorithm" setting is set to " RSA .".
Encryption algorithm	This setting specifies the encryption algorithm used for the certificate enrollment request.
Hash function	This setting specifies the hash function used for the certificate enrollment request.
Certificate thumbprint	This setting specifies the hexadecimal-encoded hash of the root certificate for the CA. You can use one of the following algorithms to specify the thumbprint: SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512. MD5 is supported only if "Enable FIPS" is not selected in the BlackBerry Dynamics profile.
Automatic renewal	This setting specifies how many days before a certificate expires that automatic certificate renewal occurs.
Key usage	This setting specifies the cryptographic operations that can be performed using the public key that is contained in the certificate.
Extended key usage	This setting specifies the purpose of the key that is contained in the certificate.
App restrictions	This setting specifies which BlackBerry Dynamics apps can use the certificate.
Apps allowed to use SCEP	This setting specifies the BlackBerry Dynamics apps that are allowed to use SCEP certificates. This setting is valid only if the "App restrictions" setting is set to "Allow specified apps to use certificates."
Delete expired certificates	This setting specifies whether the device deletes expired certificates.
Remove duplicate certificates	This setting specifies whether the device deletes duplicate certificates. The device deletes the certificate that has the earliest start date.

Sending client certificates to devices and apps using SCEP