Skip Navigation

Manage attestation for 
Samsung Knox
 devices

When you turn on attestation, 
BlackBerry UEM
 sends challenges to test the authenticity and integrity of 
Samsung Knox
 devices activated with the following activation types:
  • Work and personal - full control
     (
    Samsung Knox
    )
  • Work space only
     (
    Samsung Knox
    )
  • Work and personal - user privacy
     (
    Samsung Knox
    )
  1. On the menu bar, click 
    Settings > General settings > Attestation
    .
  2. To turn on attestation for 
    Samsung Knox
     devices, select 
    Enable periodic attestation challenges for KNOX Workspace devices
    .
  3. In the 
    Challenge frequency
     section, specify, in days or hours, how often the device must return an attestation response to 
    BlackBerry UEM
    .
  4. In the 
    Grace period
     section, specify a grace period. After the grace period expires with no successful attestation response, a device is considered non-compliant and the device is subject to the conditions specified in the compliance profile that is assigned to the user. Note that if a user's device is out of coverage, turned off, or has a dead battery, it cannot respond to the attestation challenges that 
    BlackBerry UEM
     sends and 
    BlackBerry UEM
     will consider the device to be non-compliant. If you have your organization's compliance policy set to wipe the device when it is out of compliance, when the device does not respond before the grace period expires, data on the device will be deleted.
  5. Click 
    Save
    .
Create a compliance profile that specifies the actions that occur when a device is considered rooted. For instructions, see Enforcing compliance rules for devices