Skip Navigation
BlackBerry Blog

BlackBerry UEM Update: Fast Device Enrollment, Self-Service Console, BlackBerry Connectivity Node, and More Will Make You an EMM Hero

Meeting in officeAs we reported earlier today, we’ve just released BlackBerry UEM12.5 as a service pack update to BlackBerry UEM (Unified Endpoint Manager; formerly known as BES12). Because this update adds so many new features that improve your ability to manage mobile devices in the enterprise, we’ve broken our overview blog into two parts. In this post, learn about the new features for iOS, Android, Samsung KNOX, Windows 10, IBM Notes Traveler, Pulse Secure, the self-service console, and the BlackBerry Connectivity Node. Then, click over to our other blog post to learn about BlackBerry UEM’s improvements to the Management Console, Licensing, and BlackBerry Dynamics (formerly known as Good Dynamics).


Specify per-app VPN for apps and app groups assigned to device groups: You can configure VPN profiles to force iOS devices to specify which apps on the device must use a VPN for their data in transit. You can specify which apps on iOS devices must use a VPN when the apps or app groups are assigned to device groups.

Manage Apple Activation Lock: The Activation Lock feature on iOS 7 and later devices allows users to protect their devices if they are lost or stolen. In BlackBerry UEM, you can now manage the Activation Lock feature on supervised iOS 7 and later devices.


Businesswoman text messaging in conference roomDisplay organization notices at new Android device activation: You can create a custom notice or user agreement that is displayed when users activate their devices. Users must acknowledge the notice to complete the activation.

Specify required security patches: You can specify which security patches Android devices must be running.

Control which work-space apps on Android for Work devices can use BlackBerry Secure Connect Plus: You can specify the work-space apps on Android for Work devices that you want to restrict from using BlackBerry Secure Connect Plus. By default, Google Play is restricted, as it does not support the proxy configuration used by BlackBerry Secure Connect Plus. Android for Work devices use a direct connection over the internet to Google Play.

Samsung KNOX

Bulk-enroll Samsung KNOX devices: You can use the bulk-enrollment feature of KNOX Mobile Enrollment to activate large numbers of corporate-owned devices in BlackBerry UEM.

Windows 10

Configure Enterprise Data Protection for Windows 10 devices: You can configure Enterprise Data Protection profiles to separate personal and work data on devices, prevent users from sharing work data outside of protected work apps or with people outside your organization, and audit inappropriate data-sharing practices. You can specify which apps are protected and trusted to create and access work files.

IBM Notes Traveler

Gain IBM Notes Traveler support: BlackBerry UEM now supports IBM Notes Traveler for Samsung KNOX Workspace devices.

Pulse Secure

Use Pulse Secure VPN client support: BlackBerry UEM now supports the Pulse Secure VPN client for iOS devices.

BlackBerry UEM Self-Service Console

Customize the BlackBerry UEM Self-Service console: You can change the color scheme of the BlackBerry UEM Self-Service console. You can add website bookmarks in the BlackBerry UEM Self-Service console.

Enable self-service for BlackBerry Dynamics users: Users with devices that are enabled for Good Dynamics can use BlackBerry UEM Self-Service to complete the following tasks:

  • Create access keys to activate BlackBerry Dynamics apps, formerly known as BlackBerry Dynamics
  • Lock, unlock, and delete app data from BlackBerry Dynamics apps on their devices

Assign user roles: You can create and assign user roles that specify the capabilities that users have in BlackBerry UEM Self-Service.

BlackBerry Connectivity Node

businesswoman checking a smart phone at stationInstall additional instances of the device connectivity components in your BlackBerry UEM domain: You have the option to install one or more instances of the BlackBerry Connectivity Node to add additional instances of the device connectivity components to your organization’s domain. Each BlackBerry Connectivity Node contains the following BlackBerry UEM components: BlackBerry Secure Connect Plus, the BlackBerry Gatekeeping Service, the BlackBerry Secure Gateway Service, and the BlackBerry Cloud Connector.

For more information about these and other BlackBerry UEM features, visit the BlackBerry UEM page on the BlackBerry Help blog. And don’t forget to read our other blog post on the new features in BlackBerry UEM to learn about improvements to the Management Console, Licensing, and BlackBerry Dynamics.

Colin Fullerton

About Colin Fullerton

Colin Fullerton is Team Lead of Enterprise Documentation and Training, BlackBerry