My employer has just went the MDM route. I setup my Verizon KEYone as recommended. Many of the basic apps required to run the phone now also show up in duplicate as secure (dialer, camera, Keyboard, etc) including some BlackBerry specific apps such as Contacts. However, I can not use the secure Contacts app because BlackBerry Hub+ Services did not duplicate with a secure version.
Is this normal for these phones when using MDM?