Skip to content

Configuring BlackBerry UEM for the first time

The following table summarizes the configuration tasks covered in this guide. The tasks are optional based on your organization's needs. Use this table to determine which configuration tasks you should complete.

After you complete the appropriate tasks, you are ready to set up administrators, set up device controls, create users and groups, and activate devices.

Task

Required or Optional

Description

Connect to your organization's company directory and enable secure connectivity features

Optional

You can install, activate, and configure the BlackBerry Connectivity Node to provide access to your organization's company directory and to enable secure connectivity features.

Create server groups

Optional

You can use server groups to set up regional connections for enterprise connectivity features by deploying one or more BlackBerry Connectivity Node instances in a dedicated region.

Configure the BlackBerry Connectivity Node to send data through a proxy server

Optional

You can configure the BlackBerry Connectivity Node components to send data through a proxy server in your organization’s environment.

Obtain and register an APNs certificate

Optional

If you want to manage and send data to iOS or macOS devices, you must obtain a signed CSR from BlackBerry, use it to obtain an APNs certificate from Apple, and register the APNs certificate with the BlackBerry UEM domain.

Control which devices can access Exchange ActiveSync

Optional

If you configured Microsoft Exchange to block devices from accessing work email and organizer data unless the devices are added to an allowed list, you must create a Microsoft Exchange configuration in BlackBerry UEM.

Configure BlackBerry UEM to support Android for Work

Optional

To support Android for Work, you need to configure your G Suite or Google Cloud domain to support third-party mobile device management providers and configure BlackBerry UEM to communicate with your G Suite or Google Cloud domain.

Manage attestation for Samsung KNOX devices

Optional

If you turn on attestation, BlackBerry UEM sends challenges to test the authenticity and integrity of Samsung KNOX devices.

Configure BlackBerry UEM for the Apple Device Enrollment Program

Optional

If you want to use the BlackBerry UEM management console to manage iOS devices that your organization purchased from Apple for DEP, you must configure this feature.

Set up BlackBerry UEM Self-Service

Optional

If you want to allow users to perform certain management tasks, such as changing their passwords, you can set up and distribute the BlackBerry UEM Self-Service web application.

Configure BlackBerry UEM to make TLS/SSL connections to Exchange ActiveSync

Optional

If you enable the BlackBerry Secure Gateway Service to provide a secure connection between your mail server and iOS devices with the MDM controls activation type, you may need to add the Exchange ActiveSync server certificate to BlackBerry UEM.

Configure BlackBerry UEM to synchronize with the Windows Store for Business

Optional

If you want to manage Windows 10 apps, you must configure BlackBerry UEM to synchronize with the Windows Store for Business.

Migrate users, groups, and other data from BlackBerry UEM

Optional

You can use the management console to migrate users, devices, groups, and other data from a source on-premises BES12 or BlackBerry UEM database.