BlackBerry UEM manages devices and work applications through policy, identity and separated app data. Buyers can choose controlled hosting options. BSI approval names a specific server release and software boundary; it does not approve every client, host environment or integrated endpoint deployment.
BlackBerry UEM manages device compliance, authentication and separated work applications. The supplier offers controlled hosting choices. BSI certified UEM Server 12.21.1 (40.32.0) at EAL 4 augmented by ALC_FLR.3; that evaluated software release is distinct from a customer's integrated endpoint service.
Technical detail
Core features
Core and Management Console expose Web UI and Web Service API interfaces; roles, internal PKI and LDAP support administration. Signed policies reach devices over TLS at check-in.
Device compliance, authentication and app containerization provide cryptographic separation between work and personal data.
On-premises, air-gapped or sovereign managed-cloud choices; CAC/PIV integration and BlackBerry Dynamics support controlled identity and application use.
The evaluated UEM server is a software-only TOE. Hardware, virtualization, host OS, JRE and SQL database are outside the BSI evaluation boundary.
Endpoint policy management
Application containerization
Use & integration
Recorded applications
Administration of controlled devices and work applications with deployment-specific identity and hosting policies.
These describe the reviewed application scope, not confirmed deployments, released requirements or procurement eligibility.
Evidence of maturity
Current commercial offering. BSI-DSZ-CC 1235-2025 certified Server 12.21.1 (40.32.0) on 8 September 2025, with validity to 7 September 2030.
Commercial availability
Commercial endpoint software with on-premises, air-gapped and sovereign managed-cloud options; exact server version, clients and deployment dependencies require assessment.
Integration and verification
Readiness
A technology readiness level is not established by the reviewed public sources.
Reviewed connections
No reviewed Mission area or released Defence need connection is currently published.
Original sources 2 linked records
These records support this capability and its published Mission area and Defence need connections. A source count is not a count of independent confirmations.
