Activating iOS and macOS devices that are enrolled in ADE

You can enroll iOS, iPadOS, and macOS devices in Apple Automated Device Enrollment (ADE) and assign enrollment configurations and activation profiles to devices using the BlackBerry UEM management console. Enrollment configurations include extra rules that are assigned to devices during MDM enrollment.

You can use an Apple Business account to synchronize UEM with ADE. Apple Business is a web-based portal that allows you to enroll and manage devices in ADE and manage Apple VPP accounts.

Note that you can activate iOS ADE devices with UEM without using the BlackBerry UEM Client, but the UEM Client is required to support the following:

BlackBerry Secure Connect Plus
User credential profiles configured for Entrust smart credentials or app-based PKI solutions such as Purebred
Intercede user credential profiles

To activate devices that are enrolled in ADE, perform the following actions:


Step	Action
	Register devices in ADE and assign them to BlackBerry UEM.
	Optionally, for iOS devices, to add the UEM Client to the app list and assign it to users or groups, see Add an iOS app to the app list.
	Assign an enrollment configuration and activation profile to ADE devices.
	For iOS and iPadOS device users, choose how you want users to activate their devices: Send an activation email to multiple users or send an activation email to a specific user using the Apple ADE email template. If you connected UEM to your company directory, users can use their company directory usernames and passwords. Users must enter their usernames as domain\username, matching your organization's %UserDomain%\%UserName% variables. You can Assign users to ADE devices. When you assign a user to the device in UEM, they are not prompted for a username or password during device activation, unless you selected "Require credentials for assigned user" when you configured UEM for ADE. For macOS device users, Assign users to ADE devices.
	Distribute devices to users and have them activate with UEM. For macOS devices, it is a best practice to reset the device to erase all content and settings before the user activates the device with UEM. iOS devices: If you want to support features that require the UEM Client, instruct users to install and open the UEM Client to start the activation process. macOS devices: When users start the activation process, they receive a device management prompt, followed by a prompt to set up the primary user account. If the assigned activation profile is configured to set up a local administrator account, the local administrator account is created in the background. If the user wants to log in with the local administrator account, you can view the generated password in the user's device details in the management console and provide it to the user, or instruct the user to view the generated password in BlackBerry UEM Self-Service, if they are granted that permission. The assigned activation profile determines how long the password is valid after it is viewed.

BlackBerry Documentation Center

Find comprehensive help information for all BlackBerry enterprise products.

Activating iOS and macOS devices that are enrolled in ADE