ISEC7 Endpoint Management
UEM consulting, migration and operations
Which UEM platforms does ISEC7 support?
ISEC7 works closely with the UEM vendors and builds the right setup for each customer scenario, whether you manage 200 or 250,000 devices.
Our UEM solution portfolio includes solutions from BlackBerry, Ivanti, Microsoft, Samsung, Omnissa (formerly VMware), Jamf and Google.
Microsoft 365, Azure and Intune
ISEC7 provides detailed expertise in Microsoft 365 and Azure environments. Talk to our experts about the Microsoft Cloud benefits and the improvements in infrastructure operations. In highly regulated organizations as well, ISEC7 migrates on-premises environments to Microsoft 365, secures the cloud tenant and handles licensing. Let's talk about your specific requirements!
- Microsoft Azure
- Microsoft 365 solutions
- Microsoft Intune
- On-premises to Microsoft 365 migrations
- Microsoft 365 licensing
Several UEM platforms in one console: ISEC7 SPHERE
ISEC7 SPHERE is an vendor agnostic management and monitoring solution that ensures uptime and efficiency in your Digital Workplace landscape. The solution enables organizations to monitor and manage their entire Digital Workplace & Mobile infrastructure and network, quickly identifying any potential issues to resolve — from one web-based dashboard.
- Hybrid UEM & UES Workplace Management
- Digital Workplace Monitoring
- Compliance & Transaction Monitoring
- Device as a Service & Onboarding/Offboarding
- User Self Service
- UEM Migrations
UEM platforms in ISEC7's portfolio
Frequently asked questions about endpoint management at ISEC7
What is the difference between MDM and UEM?
Mobile device management (MDM) manages smartphones and tablets, while unified endpoint management (UEM) also covers laptops and desktops and manages devices, apps and policies for all endpoints in one platform. ISEC7 advises on, integrates and operates UEM platforms for smartphones, tablets, mobile computers and desktops, on premises or from the cloud.
How do I choose the right UEM platform for my organization?
The deciding factors are the operating systems in your device fleet and where the platform should run, on premises or in the cloud. Beyond that, look at your security requirements, what you need to document for compliance, and the systems the UEM has to connect to, such as Exchange or Microsoft 365. ISEC7 has platforms from several vendors in its portfolio, helps you choose and then implements the solution you pick.
How do I migrate devices from one UEM platform to another while they stay in use?
A migration during live operation usually runs in waves: source and target platform run side by side for a while, and devices move group by group rather than all on one cut-over date. ISEC7 runs this process with the migration module in ISEC7 SPHERE, which connects to both platforms at the same time. Users start the move of their own device in their time slot, following a migration profile, from the self-service portal or the migration app for iPhone and Android. On Android devices in COBO mode, text messages, call logs and local contacts move with the user; background in our blog post UEM migration without downtime (in German).
How can I monitor several UEM platforms such as Intune, BlackBerry UEM and Ivanti from one console?
Every UEM platform comes with its own console; a combined view only exists once a monitoring layer connects all of them. ISEC7 SPHERE connects BlackBerry UEM, Ivanti EPMM and Ivanti Neurons for MDM, Omnissa Workspace ONE and Microsoft Intune in one instance and shows servers, policies, devices and compliance status in one console; a permission model at user, server and report level controls who sees what. Organizations that need separate data storage for several clients get one instance per client. ISEC7 supports Jamf as an integration partner; ISEC7 SPHERE does not connect to Jamf at this point.
What should I consider when Microsoft Intune has to run alongside another UEM?
A device is normally enrolled in only one MDM, so for side-by-side operation you decide which devices and user groups Intune manages and which stay in the existing UEM. ISEC7 advises on Microsoft 365, Azure and Intune, migrates on-premises environments to Microsoft 365 and handles licensing. While the two run in parallel, ISEC7 SPHERE monitors both, including Intune policies and profiles from version 20.9.0. Administrators can take the two-day Microsoft Intune Fundamentals course (#1808).
Can I get BlackBerry UEM as a cloud service operated in Germany?
BlackBerry UEM can run on premises or be used from a cloud; with a cloud service, the provider determines where the environment runs and who administers it. For this, ISEC7 operates the Sovereign BlackBerry UEM Cloud in Germany. It comes as an Enterprise package for companies and public bodies and as a Regulated package for indigo and Samsung Knox Native; in the Regulated package, operation and administration are handled exclusively by German staff. The BlackBerry UEM platform holds Common Criteria certificate BSI-DSZ-CC-1235-2025, issued by the BSI, Germany's Federal Office for Information Security, on 8 September 2025 and valid until 7 September 2030; the certificate holder is BlackBerry Limited, and ISEC7 is the operator.
Can we outsource the day-to-day operation of our UEM platform?
Yes, as a managed service: the provider then runs the platform day to day, not just the rollout project. ISEC7 operates UEM platforms as a managed service, on premises or from the cloud, and helps with support and licensing questions; for BlackBerry UEM, ISEC7 runs the platform in Germany through the Sovereign BlackBerry UEM Cloud. ISEC7 SPHERE monitors health, certificate expiry and known vulnerabilities of the connected servers.
Where can I get official BlackBerry UEM and Ivanti training?
Official courses are run by training partners authorized by the respective vendor. ISEC7 is an officially authorized BlackBerry Training Partner and an officially authorized Ivanti Training Center for Europe, North America and Asia-Pacific. Courses include BlackBerry Unified Endpoint Management (#1801, 3 days), Ivanti EPMM Fundamentals (#1803, 3 days), Microsoft Intune Fundamentals (#1808, 2 days), and Android Enterprise Fundamentals (#1805) and Samsung Knox Fundamentals (#1806, 1 day each). They run in Hamburg, online or as a closed course at your site; dates are on the training page.
Which UEM vendors does ISEC7 work with?
BlackBerry, Ivanti, Microsoft (Intune), Omnissa (Workspace ONE, formerly VMware), Samsung (Knox), Jamf and Google (Android Enterprise and ChromeOS). Since 2025, ISEC7 has been a certified reseller for Samsung Knox Native. Whether ISEC7 advises, migrates or operates a given platform is agreed per project.
Last reviewed: 28 September 2026 · Vendor list based on the ISEC7 partner matrix · BlackBerry UEM certificate details as listed by the BSI, retrieved 28 September 2026