Managing activation passwords

When you set activation passwords for users, you can do the following:

Have 
BlackBerry UEM
 autogenerate an activation password or you can specify an activation password.
Specify how long the activation password is valid (in minutes or days).
Specify that the activation period expires as soon as the user activates a device, effectively limiting the number of devices that a user can activate with that password to one.

For more information, see Set an activation password and send an activation email message.

You can create multiple passwords for a user and pair the passwords with specific activation profiles. For more information, see Allowing users to activate multiple devices with different activation types.

If you allow users to set activation passwords in 

BlackBerry UEM Self-Service

, users can create activation passwords whenever needed, but they can activate only the number of devices that are specified in the the activation profile. For more information, see Allow users to set activation passwords in BlackBerry UEM Self-Service.

You can expire activation passwords for a user at any time. For more information, see Manually expire an activation password.

If you are deploying devices using 

Samsung Knox Mobile Enrollment

, you can allow users of those devices to use their 

Microsoft Active Directory

 credentials to activate their devices. Instead of managing activation passwords for each user, you can instruct users to use their 

Active Directory

 credentials. This option applies only to on-premises environments and to devices that are enrolled in your organization's 

Knox Mobile Enrollment

 account. For more information, see Specify the default settings for activation passwords.