Requirements: Integrating

BlackBerry UEM

with

Cisco ISE

BlackBerry UEM

supports integration with

Cisco ISE

version 1.2 and later.

Any operating system that

UEM

supports, except for

Windows 10

for desktop.

Cisco ISE

uses the default

BlackBerry Web Services

listening port, 18084, to obtain data about devices from

UEM

.

If port 18084 was not available when

UEM

was installed, the setup application selected another available port for this purpose. To verify the correct port value, in the

BlackBerry UEM Core

log file (CORE), search for

(^/ciscoise/.*)

and record the port number that is listed just before this text.

If a firewall exists between

UEM

and

Cisco ISE

, configure the firewall to allow HTTPS sessions between both systems.

Cisco ISE

requires a dedicated

UEM

administrator account that it can use to retrieve data about devices. You can use an existing administrator account or you can create a new administrator account. It must be a local administrator account (not a directory user). The administrator account requires a role with the following permissions:

View users and activated devices
Manage devices
Lock device and set message
Delete only work data
Delete all device data

The default Security Administrator and Enterprise Administrator roles have these permissions, or you can create a custom role with these permissions. For more information, see Create an administrator in the Administration content.