Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Planning and Architecture
  4. BlackBerry UEM Architecture and Data Flows
  5. Activating devices and BlackBerry Dynamics apps
  6. Data flow: Activating an Android device for MDM

Data flow: Activating an 
Android
 device for MDM

Diagram showing the steps and components mentioned in the following data flow.
The 
MDM controls
 activation type is deprecated for devices with 
Android
 10. Attempts to activate 
Android
 10 and later devices with the 
MDM controls
 activation type will fail. For more information, visit https://support.blackberry.com/community to read article 48386.
  1.  You perform the following actions:
    1. Add a user to 
      BlackBerry UEM
       as a local user account or using the account information retrieved from your company directory
    2. Make sure an activation profile that specifies the "
      MDM controls
      " activation type is assigned to the user
    3. Use one of the following options to provide the user with activation details:
      • Automatically generate a device activation password and, optionally, a 
        QR Code
         and send an email with activation instructions for the user
      • Set a device activation password and communicate the username and password to the user directly or by email
      • Don't set a device activation password and communicate the 
        BlackBerry UEM Self-Service
         address to the user so that they can set their own activation password and view a 
        QR Code
        .
  2. The user downloads and installs the 
    BlackBerry UEM Client
     on the device. After it is installed, the user opens the 
    BlackBerry UEM Client
     and enters the email address and activation password or scans the 
    QR Code
    .
  3. The 
    BlackBerry UEM Client
     on the device performs the following actions:
    1. Establishes a connection to the 
      BlackBerry Infrastructure
    2. Sends a request for activation information to the 
      BlackBerry Infrastructure
  4. The 
    BlackBerry Infrastructure
     performs the following actions:
    1. Verifies that the user is a valid, registered user
    2. Retrieves the 
      BlackBerry UEM
       address for the user
    3. Sends the address to the 
      BlackBerry UEM Client
  5. The 
    BlackBerry UEM Client
     establishes a connection with 
    BlackBerry UEM
     using an HTTP CONNECT call over port 443 and sends an activation request to 
    BlackBerry UEM
    . The activation request includes the username, password, device operating system, and unique device identifier.
  6. BlackBerry UEM
     performs following actions:
    1. Inspects the credentials for validity
    2. Creates a device instance
    3. Associates the device instance with the specified user account in the 
      BlackBerry UEM
       database
    4. Adds the enrollment session ID to an HTTP session
    5. Sends a successful authentication message to the device
  7. The 
    BlackBerry UEM Client
     creates a CSR using the information received from 
    BlackBerry UEM
     and sends a client certificate request to 
    BlackBerry UEM
     over HTTPS.
  8. BlackBerry UEM
     performs the following actions:
    1. Validates the client certificate request against the enrollment session ID in the HTTP session
    2. Signs the client certificate request with the root certificate
    3. Sends the signed client certificate and root certificate back to the 
      BlackBerry UEM Client
    A mutually authenticated TLS session is established between the 
    BlackBerry UEM Client
     and 
    BlackBerry UEM
    .
  9. The 
    BlackBerry UEM Client
     requests all configuration information and sends the device and software information to 
    BlackBerry UEM
    .
  10. BlackBerry UEM
     stores the device information in the database and sends the requested configuration information to the device.
  11. The 
    BlackBerry UEM Client
     determines if the device uses 
    Knox
     MDM and is running a supported MDM version. If the device uses 
    Knox
     MDM, the device connects to the 
    Samsung
     infrastructure and activates the 
    Knox
     management license. After it is activated, the 
    BlackBerry UEM Client
     applies the 
    Knox
     MDM IT policy rules from 
    BlackBerry UEM
    .
  12. The device sends an acknowledgment to 
    BlackBerry UEM
     that it received and applied the configuration information. The activation process is complete.