Export the root certificate of the Universal Device Service

On the computer that hosts the BlackBerry Enterprise Service 10 core components, open the Microsoft Management Console.
If a Windows message appears and requests permission to make changes to the computer, click Yes.
Click Console Root.
Click File > Add/Remove Snap-in.
In the Available snap-ins list, click Certificates (Local computer). Click Add.
In the Certificates snap-in dialogue, select the Computer account option. Click Next.
In the Select Computer dialogue, select the Local computer option. Click Finish.
Click OK.
Expand Certificates (Local Computer) > Personal. Click Certificates.
Right-click RIM UDS SERVER ROOT <identifier>. Click All Tasks > Export.
In the Certificate Export Wizard, click Next.
When prompted about whether to export the private key with the certificate, select No, do not export the private key. Click Next.
When prompted to select the file format, select the DER encoded binary X.509 option. Click Next.
Click Browse.
In the File name field, type a name for the certificate. Navigate to the location where you want to save the certificate. Click Save.
Click Next.
Click Finish. Click OK.

After you finish:

Repeat this task for each instance of the core components in the BlackBerry Enterprise Service 10 domain.
Transfer the certificate (or certificates) to the computer that hosts your organization’s Microsoft Exchange Server.
On the computer that hosts the Microsoft Exchange Server, import the Universal Device Service root certificate (or certificates) into the Trusted Root Certification Authorities certificate store.