Configure attestation for Windows 10 devices Skip Navigation

Configure attestation for
Windows 10
devices

When you enable attestation,
BlackBerry UEM
sends challenges to test the authenticity and integrity of
Windows 10
devices. Note that the
Windows 10
attestation settings do not apply to
BlackBerry Desktop
(
BlackBerry Access
+
BlackBerry Work
).
  1. In the management console, on the menu bar, click
    Settings > General settings > Attestation
    .
  2. Select
    Enable periodic attestation challenges for Windows 10 devices
    check box.
  3. In the
    Challenge frequency
    section, specify how often the device must return an attestation response to
    UEM
    .
  4. In the
    Grace period
    section, specify the grace period for devices. When the grace period expires with no successful attestation response, a device is considered out of compliance and is subject to the actions that you specify in the assigned compliance profile.
  5. Click
    Save
    .
Create a compliance profile that specifies the actions that occur when a device is considered rooted. For instructions, see Enforcing compliance rules for devices
  • In the compliance profile assigned to devices, configure the
    Windows
    device health attestation rules and configure the actions that you want
    UEM
    to carry out when devices fail attestation.
  • In the management console, you can view a device's attestation status in the device details.