Download BlackBerry UEM 12.10

BlackBerry Unified Endpoint Management, UEM for short, can be seen as the further development and merger of both BlackBerry Enterprise Server and Good Control MDM/MAM. The product focuses on mdm, managing devices, and mam, managing applications on these devices. In addition, it can be integrated with other products to extend its functionality, such as BlackBerry Share, BlackBerry Workspaces and BlackBerry 2FA. BlackBerry UEM 12.10 has been released and the corresponding list of updates looks like this:

What’s new in BlackBerry UEM 12.10

android

• Enable Android Enterprise for all Android Enterprise instances: The configuration wizard that appears on initial log in to BlackBerry UEM now allows administrators to configure Android Enterprise. (JI 2539585)
• Android SafetyNet improvements: The following improvements were made for Android SafetyNet support:
  • A Google SafetyNet attestation failure option was added to the compliance profile. This option creates a compliance rule that specifies the actions that occur if devices do not pass SafetyNet attestation.
  • An app grace period was added to the Android SafetyNet configuration.
  • You can add a list of BlackBerry Dynamics apps that receive attestation challenges.
• Policies for Android Enterprise devices: Policies have been added for logging of SMS, MMS and phone calls on Android Enterprise devices. You can enable the logging in a server group or in the default settings of the BlackBerry Connectivity Node setup page. You must upgrade the BlackBerry Connectivity Node to the most recent version before you can use this feature. (JI 856189)
• Specify which certificates are used with Android apps: A new certificate mapping profile allows you the specify which user credential, SCEP, or shared certificate profile is used when an Android app requires a certificate. (JI 2517869)
• Android app based PKI: You can now use an app-based PKI solution such as Purebred with BlackBerry Dynamics apps on Android devices. (JI 1965015)
• Samsung KNOX support: BlackBerry UEM now supports devices running Samsung KNOX 3.2. (JI 2573555)
• Support for Samsung KNOX policies on Android Enterprise for all BlackBerry UEM activations: The benefits of Samsung KNOX are now available to Samsung KNOX devices when the devices are activated with an Android Enterprise activation type. Samsung KNOX devices that are activated with an Android Enterprise activation type now have Samsung KNOX policies applied. Even though devices already activated with a Samsung KNOX activation type continue to work, the Android Enterprise activation types are recommended for new activations. (JI 2510232)

iOS

• event notification: A new Administration section was added to the Event notifications page. The section contains a field that allows you to set up a notification that is sent when an administrator account gets locked. (JI 2529062)
• Device unenrollment notification: The event notification that you receive for device unenrollment now includes the reason that the unenrollment occurred. (JI 2565941)
• New S/MIME settings: New settings are available for iOS 12 and later devices. (JI 2571842)
• Per-app notification: When you are configuring per-app notifications for an iOS device, you can select the following new options:
  • Enable critical alert: This option specifies whether a critical alert can override the do not disturb profile and notification settings. This setting applies only to iOS 12.0 and later devices.
  • Show in CarPlay: This option specifies whether notifications display in Apple CarPlay. This setting applies only to iOS 12.0 and later devices.
• Workapp catalog search: Users can now perform a search in the work app catalog to easily find apps that are assigned to them.

BlackBerry Dynamics

• App deployment reports: For BlackBerry Dynamics apps, you can export app deployment reports to an .html file from the Apps screen in the management console. The report includes information about apps deployed by BlackBerry UEM and the users that have installed the apps on their devices. The report now includes a Status column that provides a status of the apps on each device, such as installed and not installed. (JI 2565954)
• BlackBerry Dynamics access key email: When you generate BlackBerry Dynamics access keys for a user, you can specify whether to send an activation email to the user. (JI 2578997)
• SCEP improvement: You can now configure BlackBerry Dynamics apps to use SCEP to retrieve certificates. (JI 2532872)

Installation

• Remove BlackBerry Collaboration Service, JRE, and JCE deployment from setup.exe: As of BlackBerry UEM release 12.10, the BlackBerry Collaboration Service and JRE are no longer bundled with the installer. If you are installing BlackBerry UEM, you must first download and install JRE (minimum version JRE 8u151).

Certificates

• Certificate-based authentication improvement: BlackBerry UEM now supports certificate-based authentication for logging in to the management console and UEM Self-Service. (JI 1465040)

BlackBerry UEM Notifications

• User synchronization service from UEM: UEM administrators can now ensure all of their users are in the BlackBerry AtHoc system by synchronizing users from within the UEM console. Administrators can set up a user synchronization service as a system job that updates users periodically and keeps track of the changes.

Fixed issues

Installation, upgrade, and migration fixed issues

• After you upgraded to BlackBerry UEM 12.9 MR1, some BlackBerry Enterprise Identity tenant synchronizations might not have completed. (JI 2612647)
• When you upgraded from BlackBerry UEM 12.9 to BlackBerry UEM 12.9 MR1, if the file path contained brackets (), the upgrade might have failed. For example, this file path did not allow the upgrade to complete: C:\users\besadmin\downloads\upgrade(x.xx.xx). (JI 2611366)
• When you installed a BlackBerry Router you could not change any of the SRP settings, such as SRP host. (JI 2572218)
• When you were migrating devices from Good Control to BlackBerry UEM, if you refreshed the cache on the migrate device page and the user had an associated device, and then in Good Control you added another device for the same user, migrated the user and the user’s new device, and did not refresh the cache, the new device did not display on the Device migration status page. (JI 2519995)

User and device management fixed issues

• You could not use KNOX Mobile Enrollment if you were using BlackBerry UEM in a dark site environment. (JI 2578834)

Management console fixed issues

• If you created a user certificate that had only LDAP CRL URIs specified, if the certificate was revoked, the user could still log in to the BlackBerry UEM management console.(JI 2637962)
• In a user credential profile, you could change the certificate type after you assigned the profile to a device. (JI 2580374)
• If you navigated to Settings > Infrastructure > Logging > Global logging settings and changed the Maximum server log file age, the BlackBerry Proxy log files that were older than the number of days that you entered were not removed. (JI 2577785)