Skip Navigation

Supporting 
Apple
 User Enrollment for iOS and iPadOS devices

You can use the 
User privacy - User enrollment
 activation type for 
iOS
 and 
iPad
OS devices to make sure that user data is kept private and separated from work data. With this activation type, a separate work space is installed on the device for work apps and the native Notes, 
iCloud
 Drive, Mail (attachments and full email bodies), Calendar (attachments), and 
iCloud Keychain
 apps. This activation type enables app management, IT policy management, email profiles, 
Wi-Fi
 profiles, and per-app VPN. Administrators can manage work data (for example, wipe work data) without affecting personal data. This activation type is supported on unsupervised 
iPhone
 and 
iPad
 devices that run 
iOS
 or 
iPad
OS 13.1 or later.
If you want to support 
Apple
 User Enrollment, verify the following:
  • Verify that the devices that you will activate using this activation type are not supervised.
  • Create a managed 
    Apple
     ID account for each user. The managed 
    Apple
     ID email address must match the user’s email address in 
    BlackBerry UEM
    .
  • When you set the device activation password for a user, make sure to select the 
    Apple
     User Enrollment activation email template. 
  • Assign the 
    BlackBerry UEM Client
     using a VPP license to users if you want to allow them to easily activate other 
    BlackBerry Dynamics
     apps, import certificates, use 
    BlackBerry 2FA
     features, use 
    CylancePROTECT
    , and check their compliance status. If you set the disposition to Required, the user is prompted to install the app. If you set the disposition to Optional, the user must manually download the app from Work Apps.