Configure attestation for Windows 10 devices

When you enable attestation, BlackBerry UEM sends challenges to test the authenticity and integrity of Windows 10 devices. Note that the Windows 10 attestation settings do not apply to BlackBerry Desktop (BlackBerry Access + BlackBerry Work).
  1. In the management console, on the menu bar, click Settings > General settings > Attestation.
  2. Select Enable periodic attestation challenges for Windows 10 devices check box.
  3. In the Challenge frequency section, specify how often the device must return an attestation response to UEM.
  4. In the Grace period section, specify the grace period for devices. When the grace period expires with no successful attestation response, a device is considered out of compliance and is subject to the actions that you specify in the assigned compliance profile.
  5. Click Save.
  • Create a compliance profile that specifies the actions that occur when a device is considered rooted. For instructions, see Enforcing compliance rules for devices.
  • In the compliance profile assigned to devices, configure the Windows device health attestation rules and configure the actions that you want UEM to carry out when devices fail attestation.
  • In the management console, you can view a device's attestation status in the device details.