BlackBerry® Enterprise Solution

[NKraft]

While reading through forum posts like

KB15973 - Prerequisites to use S/MIME on a BlackBerry smartphone activated on a BES

 I did not find a tool that enables me to roll out root or intermediate certificates to all our Blackberry devices at once.

it seems that each device has to synchronize certs by Desktop manager, or the user has to search and install the certificates on his own.

Is there a way to push those certificates to the OTA or by IT Policies ?

[CerealBypass]

There are a few other methods listed in KB13355 that might help. You can host the cert on an internal website, or email the certs as attachments.

There aren't any IT policies that will push the certificates out to the users.