Creating activation profiles

You can control how devices are activated and managed using activation profiles. An activation profile specifies the number and types of devices that a user can activate, the activation type that determines how much control you have over devices, and other details such as the identity certificate and attestation settings.

When you add a user to BlackBerry UEM, UEM assigns the Default activation profile to the user account. You can change the Default activation profile to suit your requirements, or you can create and assign a custom activation profile.

When you assign an activation profile, the profile is used for any new device activations or reactivations. If a device is already activated and you assign a new activation profile, the new profile is used when the device is reactivated or the user activates a new device.

When you update an assigned activation profile that has already been used for device activations (for example, to change the identity certificate strength or key size), the behavior is different depending on the device type and activation type:
  • For Android devices, and for iOS devices that do not use the MDM controls activation type, the updated profile is used only for new device activations or reactivations. Devices that are already activated are not automatically updated with the changes made to the activation profile.
  • For macOS devices and for iOS devices with the MDM controls activation type, the changes are applied to already activated devices through an automatic re-enrollment process.