Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Administration
  4. Activating devices
  5. Creating activation profiles
  6. Create an activation profile

Create an activation profile

  1. On the menu bar, click 
    Policies and Profiles
    .
  2. Click 
    Policy > Activation
    .
  3. Click The Add icon.
  4. Type a name and description for the profile.
  5. In the 
    Number of devices that a user can activate
     field, specify the maximum number of devices the user can activate. 
  6. In the 
    Device ownership
     drop-down list, select the default setting for device ownership. Perform one of the following actions:
    • If some users activate personal devices and some users activate work devices, select 
      Not specified
      .
    • If users typically activate work devices, select 
      Work
      .
    • If users typically activate personal devices, select 
      Personal
      .
  7. Optionally, select an organization notice in the 
    Assign organization notice
     drop-down list. If you assign an organization notice, users activating 
    BlackBerry 10
    , 
    Windows 10
    , 
    iOS
    , or 
    macOS
     devices must accept the notice to complete the activation process.
  8. In the 
    Device types that users can activate
     section, select the device types as required. Device types that you don't select are not included in the activation profile and users can't activate those devices.
  9. Perform the following actions for each device type included in the activation profile:
    • Click the tab for the device type.
    • In the 
      Device model restrictions
       drop-down list, select whether to allow or restrict specified devices or to have no restrictions. Click 
      Edit
       to select the devices you want to restrict or allow, and click 
      Save
      .
    • In the 
      Allowed version
       drop-down list, select the minimum allowed version.
    • On the 
      Windows
       tab, you can select one or both form factor options and choose whether to allow or disallow those form factors in the 
      Device model restrictions
       drop-down list.
    • In the 
      Activation type
       section, select an activation type.
      • For 
        Android
         devices, you can select multiple activation types and rank them to meet your organization's requirements.
      • The "
        MDM controls
        " activation type is deprecated for devices with 
        Android
         10 and later.
      • For 
        Android
         devices, if you select an 
        Android Enterprise
         activation type, you can select the 
        When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus.
         option to enable 
        BlackBerry Secure Connect Plus
         and 
        Knox
         Platform for Enterprise features (for devices that support 
        Samsung Knox
        ).
      • For 
        Android
         devices, if you select the "
        MDM controls
        " activation type and you do not want 
        Knox
         MDM policy rules to be applied to the devices, clear the 
        Activate Samsung KNOX APIs on MDM Controls activations
         check box. This setting applies only to devices that support KNOX MDM. 
      • For 
        Android
         devices, if you select one of the 
        Samsung Knox
         activation types and want to use 
        Google Play
         to manage work apps, select 
        Google Play app management for Samsung Knox Workspace devices
        . This option is available only if you have configured a connection to a 
        Google
         domain. For more information, see the Configuration content.
      • For 
        iOS
         devices, if you select the "
        User privacy
        " activation type and you want to enable SIM-based licensing, you must select the 
        Allow access to SIM card and device hardware information to enable SIM-based licensing
         option.
      • For 
        iOS
         devices, if you select the "MDM controls" or 
        User privacy
         (with SIM-based licensing) activation types, you can restrict unsupervised devices by selecting "Do not allow unsupervised devices to activate."
        To perform 
        iOS
         app integrity checking, you must enable CylancePROTECT in your 
        BlackBerry UEM
         domain. For more information, see the CylancePROTECT content.
  10. For 
    Android
     devices, in the 
    SafetyNet attestation options
     section, you can optionally select an attestation method. The choices are: 
    • Perform SafetyNet attestation for device: 
      BlackBerry UEM
       sends challenges to test the authenticity and integrity of devices.
    • Perform SafetyNet attestation on device activation: 
      BlackBerry UEM
       sends challenges to test the authenticity and integrity of devices when they are activated.
    • Perform SafetyNet attestation on 
      BlackBerry Dynamics
       app activation: 
      BlackBerry UEM
       sends challenges to test the authenticity and integrity of 
      BlackBerry Dynamics
       apps when they are activated.
  11. Click 
    Add
    . 
If necessary, rank profiles.