Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.11
  3. Administration
  4. Activating devices
  5. Device activation
  6. Activation types: iOS devices

Activation types: 
iOS
 devices

Activation type
Description
MDM controls
This activation type provides basic device management using device controls made available by 
iOS
. A separate work space is not installed on the device and there is no added security for work data.
You can control the device using commands and IT policies. During activation, users must install a mobile device management profile on the device.
User privacy
You can use the 
User privacy
 activation type to provide basic control of devices while making sure that users' personal data remains private. With this activation type, no separate container is installed on the device, and no added security for work data is provided. Devices activated with 
User privacy
 are activated on 
BlackBerry UEM
 and can use services such as Find my Phone and Root Detection, but administrators cannot control device policies.
For SIM-based licensing, you must select "Allow access to SIM card and device hardware information to enable SIM-based licensing" in the activation profile. Users must install an MDM profile that can access only the SIM card and device hardware information that is required to check if an appropriate SIM license is available (for example, ICCID and IMEI).
This activation type is not supported for 
Apple TV
 devices.
When you allow 
User privacy
 activations in the 
iOS
 activation profile, you select the profiles that you want manage on the device based on the needs of your organization. You can choose any of the following:
  • Allow access to SIM card and device hardware information to enable SIM-based licensing
    : This option specifies whether 
    BlackBerry UEM
     can access SIM card and device hardware information, such as iCCID and IMEI, to check if an appropriate SIM license is available.
  • Allow App management
    : This option specifies whether you want to install or remove work apps on the device, and display a list of installed work apps in the user details screen.You can also specify whether to allow app shortcuts.
  • Allow IT Policy management
    : This option specifies whether you want to apply a limited set of IT policy rules to the device (password policies, allow screenshots, allow documents from managed sources in unmanaged destinations, and allow documents from unmanaged sources in managed destinations).
  • Allow Email profile management
    : This option specifies whether to apply the Email profile settings that are assigned to the user to the device.
  • Allow Wi-Fi profile management
    : This option specifies whether to apply the 
    Wi-Fi
     profile settings that are assigned to the user to the device.
  • Allow VPN profile management
    : This option specifies whether to apply the VPN profile settings that are assigned to the user to the device.
Device registration for 
BlackBerry 2FA
 only
This activation type supports the 
BlackBerry 2FA
 solution for devices that 
BlackBerry UEM
 does not manage. This activation type does not provide any device management or controls, but allows devices to use the 
BlackBerry 2FA
 feature. To use this activation type, you must also assign the 
BlackBerry 2FA
 profile to users.
When a device is activated, you can view limited device information in the management console, and you can deactivate the device using a command.
This activation type is supported only for 
Microsoft Active Directory
 users.
This activation type is not supported for 
Apple TV
 devices.
For more information, see the BlackBerry 2FA content.