Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.21
  3. Managing device configurations
  4. Configuring attestation for devices
  5. Configure attestation for Windows 10 devices

Configure attestation for
Windows 10
 devices

When you enable attestation,
BlackBerry UEM
 sends challenges to test the authenticity and integrity of
Windows 10
 devices. Note that the
Windows 10
 attestation settings do not apply to
BlackBerry Desktop
 (
BlackBerry Access
 +
BlackBerry Work
).
  1. In the management console, on the menu bar, click
    Settings > General settings > Attestation
    .
  2. Select
    Enable periodic attestation challenges for Windows 10 devices
     check box.
  3. In the
    Challenge frequency
     section, specify how often the device must return an attestation response to
    UEM
    .
  4. In the
    Grace period
     section, specify the grace period for devices. When the grace period expires with no successful attestation response, a device is considered out of compliance and is subject to the actions that you specify in the assigned compliance profile.
  5. Click
    Save
    .
Create a compliance profile that specifies the actions that occur when a device is considered rooted. For instructions, see Enforcing compliance rules for devices
  • In the compliance profile assigned to devices, configure the
    Windows
     device health attestation rules and configure the actions that you want
    UEM
     to carry out when devices fail attestation.
  • In the management console, you can view a device's attestation status in the device details.