BlackBerry UEM version 12.7 is a service pack (SP) update for the UEM product. This release includes a number of new features that you will find useful and interesting. This post provides details about the new features for app management and iOS, Android, and Windows 10 devices.
Read on below to learn more about those new updates, then click over to our other blog post to learn what UEM 12.7 adds for the management console.
App configuration: For Android email apps that support app configuration (such as BlackBerry Productivity Suite), you can configure the settings in an app configuration instead of in an Email profile. You must be using Android work profiles to use this feature.
List of installed apps: You can use an Enterprise Management Agent profile to specify whether BlackBerry UEM receives a list of apps that are installed in the user’s personal space on iOS, Android, Windows 10, and BlackBerry 10 devices in your environment. You can view the list of apps that are installed in a user’s personal space in the user account’s device details page or the Personal apps page. This feature is turned on by default on devices that use an activation type that supports it.
Viewing the list of personal apps installed in the user’s personal space is not supported on devices that are activated with the following activation types:
- User privacy
- Work and personal – user privacy
- Work and personal – user privacy – (Samsung KNOX)
- Work and personal – Regulated
- BlackBerry 2FA
App update notifications: Device users are notified of any new or updated apps. There is a new “Updated/New” tab in the Work Apps list and in the Work apps section of the BlackBerry UEM Client.
Apple VPP account: You can configure the VPP account to automatically update VPP apps on devices.
Restricted apps: For Samsung KNOX devices activated with Work and personal, users now have full control to create a compliance profile that enforces app restrictions in the personal space as well as the workspace.
VPP apps: You can associate VPP licenses to BlackBerry Dynamics app entitlements for iOS devices just as you can for other iOS apps. You can associate VPP licenses when you assign apps (or app groups) to users or user groups.
QR code activation: Users can activate iOS and Android devices using a QR code instead of an activation password. You can send the QR code in an activation email or users can create a QR code in BlackBerry UEM Self-Service.
Supervised devices: You can configure the activation profile to restrict devices in BlackBerry UEM that are not in supervised mode. If you restrict unsupervised devices, users cannot activate unsupervised devices whether they activate devices with the BlackBerry UEM Client or using DEP.
Logging: You can use the “Get device logs” command to retrieve device logs from iOS devices that have the BlackBerry UEM Client installed
Update OS and other new commands: You can send the following new commands to iOS devices.
- Update OS (supervised DEP devices running iOS 9 and later and supervised devices running iOS 10.3 and later)
- Restart device (supervised devices running iOS 10.3 and later)
- Turn off device (supervised devices running iOS 10.3 and later)
Android for Work: The BlackBerry UEM console and documentation is updated to reflect Google’s rebranding of Android for Work.
Logging: You can use the “Get device logs” command to retrieve device logs from Android devices that have the BlackBerry UEM Client installed.
Organizational message: You can send an organizational message to appear when the device is locked or restarted.
Wallpaper: You can set the wallpaper that displays on the device and the workspace.
Transferring contacts: Samsung KNOX Workspace devices support transferring contacts using the Bluetooth Phone Book Access Profile. This capability can be disabled by an IT policy rule.
App lock mode profile: You can use an app-lock mode to limit Windows 10 Enterprise and Windows 10 Education devices managed using MDM to run only one app. For example, you can limit access to a single app for training purposes or for point-of-sales demonstrations.
SCEP profile: Administrators can now select a SCEP profile to associate with a Wi-Fi profile for Windows 10 devices.
FIPS mode and AutoConnect: Administrators can now enable FIPS mode and AutoConnect for Windows 10 devices in a Wi-Fi profile. FIPS mode can be enabled when WPA2-Personal or WPA2-Enterprise security type and the AES encryption type are selected. Administrators may choose to allow the device to connect automatically to the Wi-Fi network when it is in range.
Reboot: Administrators can now restart a Windows 10 Mobile device running RS1 and later from the BlackBerry UEM console.
Windows Information Protection profile: Administrators can now configure additional options in Windows Information Protection profiles. For example, you can configure the work IP ranges that are considered to be part of the work network, any internal proxy servers to use when connecting to work network locations, and cloud resources that need to be protected, and a list of domains that can be used for work or personal resources.
Lock Down setting: Administrators can now enable the Lock Down setting in VPN profiles for Windows 10 devices. When this setting is enabled, the device must be connected to the VPN to have a network connection and cannot be disabled.
Apple TV: You can activate and manage Apple TV devices in BlackBerry UEM.
Certificates: BlackBerry Dynamics apps now support replacing certificates issued by BlackBerry Control with certificates issued by another CA.
PKI connector enhancements: User credential profiles now allow you to set certificate renewal and revocation options for certificates issued to users through the BlackBerry Dynamics PKI connector.
BlackBerry Dynamics Launcher
Shortcuts: You can add shortcuts to the BlackBerry Dynamics Launcher so that users can quickly access web links.
BlackBerry Dynamics SDK
No password required: With a security policy enforced by the BlackBerry Dynamics SDK and BlackBerry UEM, organizations can allow users to start mobile apps without requiring a password. The “No Password” feature is available on iOS, Android, macOS, and Windows 10 devices.
For more information about these and other BlackBerry UEM features, visit http://help.blackberry.com/en/blackberry-uem/current/. You can also read about some of our customer success stories. See how This High-Security, International Law Firm Works Better and Smarter With BlackBerry Software, or how BlackBerry UEM Helps This Leading Train Leasing Company Stay on Track.