Create an activation profile
- On the menu bar, clickPolicies and Profiles.
- ClickPolicy > Activation.
- Click .
- Type a name and description for the profile.
- In theNumber of devices that a user can activatefield, specify the maximum number of devices the user can activate.
- In theDevice ownershipdrop-down list, select the default setting for device ownership.
- SelectNot specifiedif some users activate personal devices and some users activate work devices.
- SelectWorkif most users activate work devices.
- SelectPersonalif most users activate their personal devices.
- Optionally, select an organization notice in theAssign organization noticedrop-down list. If you assign an organization notice, users activatingiOS,iPadOS,macOS, orWindows 10devices must accept the notice to complete the activation process.
- In theDevice types that users can activatesection, select the device OS types that users can activate. Device types that you don't select are not included in the activation profile and users can't activate those devices.
- Perform the following actions for each device type included in the activation profile:
- Click the tab for the device type.
- In theDevice model restrictionsdrop-down list, select one of the following options:
- No restrictions: Users can activate any device model.
- Allow selected device models: Users can activate only the device models that you specify. Use this option to limit the allowed devices to only some models.
- Do not allow selected device models: Users can't activate the device models that you specify. Use this option to block activation of some device models or devices from specific manufacturers.
If you restrict the device models users can activate, clickEditto select the devices you want to allow or restrict and clickSave. - In theMinimum allowed versiondrop-down list, select the minimum allowed OS version.Many older OS versions are no longer supported byBlackBerry UEM. You only need to select a minimum version if you don't want to support the earliest version currently supported byBlackBerry UEM. For more information on supported versions, see the Compatability Matrix.
- Select the supported activation types.
- ForiOSandiPadOSdevices, perform the following actions:
- If you selected the "User privacy" activation type and you want to enable SIM-based licensing, selectAllow access to SIM card and device hardware information to enable SIM-based licensing.
- If you selected the "User privacy" activation type and you want to manage specific features, select the appropriate check boxes. For more information on each option, see Activation types: iOS devices.
- If you selected the "MDM controls" or "User privacy" (with SIM-based licensing) activation types and you only want to activate supervised devices, selectDo not allow unsupervised devices to activate
- In theiOS app integrity checksection, optionally select one of the following attestation methods:
- Perform app integrity check on BlackBerry Dynamics app activation: Use this method to send challenges to devices when they are activated to check the integrity ofiOSwork apps.
- Perform periodic app integrity checks: Use this method to send challenges to devices to check the integrity ofiOSwork apps.
To performiOSapp integrity checking, you must enableBlackBerry Protectin yourBlackBerry UEMdomain. For more information, see the BlackBerry Protect Mobile content.
- ClickAdd.
If necessary, rank profiles.