- Managing secure connections with BlackBerry UEM
- Managing work connections using profiles
- Setting up work Wi-Fi networks for devices
- Setting up work VPNs for devices
- Enabling and assigning per-app VPN settings
- Setting up proxy profiles for devices
- Using BlackBerry Secure Connect Plus for connections to work resources
- Server and device requirements for BlackBerry Secure Connect Plus
- Enable BlackBerry Secure Connect Plus
- Updating the BlackBerry Connectivity app
- Update the BlackBerry Connectivity app for Samsung Knox Workspace and Android Enterprise devices that don't have access to Google Play
- Enterprise connectivity profile settings
- Specify the DNS settings for the BlackBerry Connectivity app
- Optimize secure tunnel connections for Android devices that use BlackBerry Dynamics apps
- Troubleshooting BlackBerry Secure Connect Plus
- Using BlackBerry 2FA for secure connections to critical resources
- Enable automatic authentication for iOS devices
- Specify DNS servers for iOS and macOS devices
- Specify email and web domains for iOS devices
- Control network usage for apps on iOS devices
- Create a web content filter profile on iOS devices
- Create an AirPrint profile for iOS devices
- Create an AirPlay profile for iOS devices
- Create an Access Point Name profile for Android devices
- Using PKI certificates with devices or apps
- Integrating BlackBerry UEM with your organization's PKI software
- Connect BlackBerry UEM to your organization’s Entrust software
- Connect BlackBerry UEM to your organization’s Entrust IdentityGuard server to use smart credentials
- Connect BlackBerry UEM to your organization's OpenTrust software
- Connect BlackBerry UEM to a BlackBerry Dynamics PKI connector
- Connect BlackBerry UEM to your organization’s app-based PKI solution
- Providing client certificates to devices and apps
- Sending certificates to devices and apps using profiles
- Sending CA certificates to devices and apps
- Sending client certificates to devices and apps using user credential profiles
- Create a user credential profile to connect to your BlackBerry Dynamics PKI connector
- Use Intercede MyID to provide derived credentials certificates to devices
- Sending client certificates to devices and apps using SCEP
- Send the same client certificate to multiple devices
- Specify the certificate used by an app using a certificate mapping profile
- Managing client certificates for user accounts
- Integrating BlackBerry UEM with your organization's PKI software
- BlackBerry Docs
- BlackBerry UEM 12.21
- Managing secure connections
- Using PKI certificates with devices or apps
- Sending certificates to devices and apps using profiles
- Sending client certificates to devices and apps using SCEP
Sending client certificates to devices and apps using SCEP
You can use SCEP profiles to specify how devices and
BlackBerry
Dynamics
apps obtain client certificates from your organization's CA through a SCEP service. SCEP is an IETF protocol that simplifies the process of enrolling client certificates to a large number of devices or apps without any administrator input or approval required to issue each certificate. Devices and BlackBerry
Dynamics
apps can use SCEP to request and obtain client certificates from a SCEP-compliant CA that is used by your organization.The CA that you use must support challenge passwords. The CA uses challenge passwords to verify that the device or app is authorized to submit a certificate request.
To use SCEP in a
BlackBerry UEM Cloud
environment, you must install the most recent version of the BlackBerry Connectivity Node
to allow UEM Cloud
to access your company directory.If your organization uses an
Entrust
CA or OpenTrust
CA, SCEP profiles are not supported for Windows 10
devices.