Skip to content

Configuring BlackBerry UEM Cloud for the first time

The following table summarizes the configuration tasks covered in this guide. The tasks are optional based on your organization's needs. Use this table to determine which configuration tasks you should complete.

After you complete the appropriate tasks, you are ready to set up administrators, set up device controls, create users and groups, and activate devices.

Task

Description

Connect to your organization's on-premises company directory and enable secure connectivity features

You can install, activate, and configure the BlackBerry Connectivity Node to provide access to your organization's on-premises company directory and to enable secure connectivity features.

Configure the BlackBerry Connectivity Node to send data through a proxy server

You can configure the BlackBerry Connectivity Node components to send data through a proxy server in your organization’s environment.

Connect BlackBerry UEM to Microsoft Azure

If you want to connect BlackBerry UEM to Azure Active Directory, use BlackBerry UEM to deploy iOS and Android apps managed by Microsoft Intune, or manage Windows 10 apps in BlackBerry UEM, connect BlackBerry UEM to Microsoft Azure.

Link company directory groups to BlackBerry UEM groups

If you connect BlackBerry UEM to your company directory, you can enable directory-linked groups to simplify onboarding and managing users.

Obtain and register an APNs certificate

If you want to manage and send data to iOS or macOS devices, you must obtain a signed CSR from BlackBerry, use it to obtain an APNs certificate from Apple, and register the APNs certificate with the BlackBerry UEM domain.

Control which devices can access Exchange ActiveSync

If you configured Microsoft Exchange to block devices from accessing work email and organizer data unless the devices are added to an allowed list, you must create a Microsoft Exchange configuration in BlackBerry UEM.

Configure BlackBerry UEM to support Android devices that have a work profile

To support Android devices that have a work profile, you need to configure your G Suite or Google Cloud domain to support third-party mobile device management providers and configure BlackBerry UEM to communicate with your G Suite or Google Cloud domain.

Manage attestation for Samsung KNOX devices

If you turn on attestation, BlackBerry UEM sends challenges to test the authenticity and integrity of Samsung KNOX devices.

Configure BlackBerry UEM for the Apple Device Enrollment Program

If you want to use the BlackBerry UEM management console to manage iOS devices that your organization purchased from Apple for DEP, you must configure this feature.

Configure BlackBerry UEM Cloud to support BlackBerry Dynamics apps

If you want to allow users to use BlackBerry Dynamics apps, you can set up BlackBerry UEM Cloud to support the apps.

Set up BlackBerry UEM Self-Service

If you want to allow users to perform certain management tasks, such as changing their passwords, you can set up and distribute the BlackBerry UEM Self-Service web application.

Configure BlackBerry UEM to make TLS/SSL connections to Exchange ActiveSync

If you enable the BlackBerry Secure Gateway to provide a secure connection between your mail server and iOS devices with the MDM controls activation type, you may need to add the Exchange ActiveSync server certificate to BlackBerry UEM.

Migrate users, groups, and other data from BlackBerry UEM

You can use the management console to migrate users, devices, groups, and other data from a source on-premises BES12 or BlackBerry UEM database.