We’ve just released the latest update to BlackBerry UEM and BlackBerry UEM Cloud. Among the many upgrades are improvements to Android, and iOS device management, and app management.
Migration and upgrade support
On premises migration support: BlackBerry UEM version 12.14 supports migrations from BlackBerry UEM version 12.12 and later, and from Good Control version 5.0.
Cloud migration support: You can perform migrations from BlackBerry UEM on-premises 12.13 and later to BlackBerry UEM Cloud.
Upgrade support: BlackBerry UEM version 12.14 supports upgrades from BlackBerry UEM version 12.12 and later.
Support for deploying apps in development from Google Play: Google Play allows developers to create tracks for prerelease apps, for example a Beta track, and target those tracks to specific enterprises. If a developer has targeted prerelease apps to your organization, UEM administrators can now select which app track to deploy when assigning an app to a user, group, or device.
Android MDM controls deprecation: Android 10 and later devices do not support MDM controls activations. New installations of BlackBerry UEM no longer display Android MDM controls as an option in the activation profile by default. A new UEM setting allows you to remove the Android MDM controls option from the activation profile on upgraded UEM instances. You can also re-add the activation type to both new and upgraded instances.
Android Enterprise device logging: You can view security logs for Android Enterprise devices that have been activated using an Android Enterprise activation type.
Manage new features in iOS 14: BlackBerry UEM includes new settings to manage capabilities in iOS 14 and iPadOS 14. Updates include per account VPN settings (for email, IMAP/POP3, CardDav, and CalDav profiles), a new DNS profile, additional Wi-Fi and VPN settings, and the ability to send a command to set the device time zone.
Defer certificate enrollment for BlackBerry Dynamics apps: Previously, users could not access a BlackBerry Dynamics app unless they completed the certificate enrollment process. Administrators can now enable a setting in user credential profiles that allows users to dismiss certificate enrollment and complete it later. For the Native Keystore connection type, the user is prompted to complete certificate enrollment each time the user starts the app. For the Entrust Smart Credential connection type, the app will not prompt the user again, but the user can complete certificate enrollment using the UEM Client.
Activate BlackBerry Dynamics apps using Okta IDP: You can now use BlackBerry UEM and BlackBerry Enterprise Identity to redirect authentication to Okta, which provides existing Okta users with a familiar user interface. This allows users to enter their Okta credentials on their device to activate BlackBerry Dynamics apps.
Note: BlackBerry Dynamics activation using Okta is not supported for users that were created in Good Control or with the legacy Good Control SOAP APIs.
Specify apps that can request access to both work and personal data: The new “Apps allowed to request cross profile access" IT policy rule allows you to specify which apps can request permission from the user to access data in both the work and personal profiles.
BlackBerry Enterprise Mobility Server
Modern authentication enhancements: BEMS Cloud now supports modern authentication in hybrid Microsoft Office 365 and on-premises Microsoft Exchange Server environments.
Support for SCP lookup: BEMS Cloud now supports the use of SCP and SSL for SCP to query Microsoft Active Directory using LDAP and locate Autodiscover endpoint URLs when using Credential authentication. This feature requires that a BlackBerry Connectivity Node instance is installed and configured.