Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Installation and Configuration
  4. Configuration
  5. Configuring BlackBerry UEM for DEP
  6. Add the first enrollment configuration

Add the first enrollment configuration

Register the server token with BlackBerry UEM before you add your first enrollment configuration.
After you register a server token, 
BlackBerry UEM
 automatically displays the window where you add your first enrollment configuration.
  1. Type a name for the configuration.
  2. Complete one of the following tasks:
    •  If you want 
      BlackBerry UEM
       to automatically assign the enrollment configuration to devices when you register them in 
      Apple
      's Device Enrollment Program, select the "Automatically assign all new devices to this configuration" checkbox.
    •  If you want to use the 
      BlackBerry UEM
       console to manually assign the enrollment configuration to specific devices, leave the "Automatically assign all new devices to this configuration" checkbox unchecked.
  3. Optionally, type a department name and support phone number to be displayed on devices during setup.
  4. In the 
    Device configuration
     section, select from the following checkboxes:
    • Allow pairing - if selected, users can pair the device with a computer
    • Mandatory - if selected, users can activate devices using their company directory username and password 
    • Allow removal of MDM profile - if selected, users can deactivate devices. 
    • Wait until device is configured - if selected, users cannot cancel the device setup until activation with 
      BlackBerry UEM
       is completed. 
  5. In the 
    Skip during setup
     section, select the items that you do not want to include in the device setup: 
    • Passcode - if selected, users are not prompted to create a device passcode
    • Location services - if selected, location services are disabled on the device
    • Restore - if selected, users cannot restore data from a backup file
    • Move from Android - if selected, you cannot restore data from an Android device
    • Apple
       ID - if selected users are prevented from signing in to 
      Apple
       ID and iCloud
    • Terms and conditions - if selected, users do not see the 
      iOS
       terms and conditions
    • Siri - if selected, Siri is disabled on devices
    • Diagnostics - if selected, diagnostic information is not automatically sent from the device during setup
    • Biometric - if selected, users cannot setup Touch ID
    • Payment - if selected, users cannot set up Apple pay
    • Zoom - if selected, users cannot set up Zoom
    • Home button setup - if selected, users cannot adjust the Home button's click
    • Screen Time – if selected, the option to setup Screen Time is skipped during DEP enrollment
    • Software update – if selected, users do not see the mandatory software update screen on the device
    • iMessage and Face Time – if selected, users do not see the iMessage and Face Time screen on the device
    • Display tone – if selected, users do not see the Display tone screen on the device 
    • Privacy – if selected, users do not see the Privacy screen on the device 
    • Onboarding – if selected, users do not see the informational onboarding screen on the device 
    • Watch migration – if selected, users do not see the watch migration screen on the device 
    • SIM setup  – if selected, users do not see the screen to set up a cellular plan on the device
    • Device-to-device migration – if selected, users do not see the device-to-device migration screen on the device
  6. Click 
    Save
    .
    If the message "An error was encountered. The server token file could not be decrypted." appears, visit support.blackberry.com/community to read article 37282.
  7. If you selected "Automatically assign new devices to this configuration," click 
    Yes
    .
Activate 
iOS
 devices. For more information about activating devices that are enrolled in DEP, see the Administration content.