BlackBerry UEM
BlackBerry Unified Endpoint Management (UEM) is a threat management software. This pattern supports the modern version of the product. The legacy product is modelled as RIM BlackBerry Enterprise Server.
Platforms supported by the pattern
The pattern discovers BlackBerry Unified Endpoint Management (UEM) deployments on the Windows system.
Identification
To run a discovery of the product, the pattern must be triggered. The BlackBerry Unified Endpoint Management (UEM) pattern is triggered by an Apache Tomcat Application Server SoftwareInstance where catalina_home contains Blackberry\UEM.
Simple identities
The following processes are parts of BlackBerry UEM. For convenience, they are given simple identities in the DiscoveredProcess list:
| Process | Simple identity |
| BESNG-UI.exe | BlackBerry UEM Console |
BlackBerryAffinityManager.exe | BlackBerry UEM Affinity Manager |
BlackBerry.BES.Gatekeeping.Windows.Service.exe | BlackBerry UEM Gatekeeping Service |
| BlackBerryDispatcher.exe | BlackBerry UEM Dispatcher |
| BlackBerrySecureConnectPlus.exe | BlackBerry UEM Secure Connect Plus |
| BlackBerrySecureGateway.exe | BlackBerry UEM Secure Gateway |
| Bmds.exe | BlackBerry UEM MDS Connection Server |
| Proxy Server\bin\prunsrv.exe | BlackBerry UEM Proxy Service |
SoftwareInstance attributes
The pattern creates a SoftwareInstance with the following default attributes:
- install_root
- key
- name
- product_version
- type (BlackBerry UEM)
- version
Additional attributes
The pattern obtains install_root from the catalina_home attribute on the triggering SoftwareInstance. A catalina_home of D:\Program Files\BlackBerry\UEM\Core\tomcat-core represents an install_root of D:\Program Files\BlackBerry\UEM.
Versioning
Version information for the product is collected by using the BlackBerry UEM package.
Application model
The pattern creates an instance-based SoftwareInstance with a key based on type and host key.
The pattern creates a communication relationship to the Apache Tomcat SoftwareInstance that was used as a trigger. The Apache Tomcat SoftwareInstance is the client.
The pattern creates a communication relationship with one of the following database nodes (the database is the server):
- A SQL Server Database node on the same host as instance UEM.
- A SQL Server SoftwareInstance on the same host as instance UEM.
The pattern creates an associate relationship to the DiscoveredProcess nodes corresponding to the linked processes that have simple identities, but only if they have the same install_root as the trigger process.