We have a service that includes a Blackberry app called Mimecast. They say we need to install some new Verisign certificates that are not included on OS 4.x devices. I have about 50 of these, mostly in outside offices so am trying to make it as easy as possible.

I know how to manually install them by emailing them, but can I push out certificates using BES 5.0.3? Also, I installed them manually on a unit yesterday, but as of this morning, it still was not verified. I had to go in and fetch the chain status. Is this something that I can set to automatically get?

I had gotten a suggestion to use the Certificate Authority Profile IT policy, but everything on that page says OS 5 is required. Those devices don't need the certificates installed.