Activation types: iOS devices
iOS
devicesActivation type | Description |
---|---|
MDM controls | This activation type provides basic device management using device controls made available by iOS and iPadOS . A separate work space is not installed on the device and there is no added security for work data.You can control the device using commands and IT policies. During activation, users must install a mobile device management profile on the device. To specify whether BlackBerry UEM can limit activation by device ID, select "Allow only approved device IDs". |
User privacy | This activation type provides basic control of devices while making sure that users' personal data remains private. A separate container is not installed on the device, and no added security for work data is provided. Devices can use services such as Find my Phone and Root Detection, but administrators cannot control device policies. For SIM-based licensing, you must select "Allow access to SIM card and device hardware information to enable SIM-based licensing" in the activation profile. Users must install an MDM profile that can access only the SIM card and device hardware information that is required to check if an appropriate SIM license is available (for example, ICCID and IMEI). This activation type is not supported for Apple TV devices.When you allow User privacy activations, you select the profiles that you want manage on the device based on the needs of your organization. You can choose any of the following:
|
User privacy - User enrollment | This activation type can be used for iOS and iPadOS devices to ensure that user data is kept private and separated from work data. A separate work space is installed on the device for work apps and the native Notes, iCloud Drive, Mail (attachments and full email bodies), Calendar (attachments), and iCloud Keychain apps.This activation type enables app management, IT policy management, email profiles, Wi-Fi profiles, and per-app VPN. Administrators can manage work data (for example, delete work data) without affecting personal data.This activation type is supported on unsupervised iPhone and iPad devices. |
Device registration for BlackBerry 2FA only | This activation type supports the BlackBerry 2FA solution for devices that UEM does not manage. This activation type does not provide any device management or controls, but it allows devices to use the BlackBerry 2FA feature. To use this activation type, you must also assign the BlackBerry 2FA profile to users.When a device is activated, you can view limited device information in the management console, and you can deactivate the device using a command. This activation type is supported only for Microsoft Active
Directory users. It is not supported for Apple TV devices.For more information, see the BlackBerry 2FA content. |