Skip Navigation
  1. BlackBerry Docs
  2. CylancePROTECT Mobile for UEM
  3. CylancePROTECT Mobile Overview and Administration Guide
  4. Detecting sideloaded apps on devices
  5. Prerequisites to support sideload detection on Android devices

Prerequisites to support sideload detection on 
Android
 devices

  • Install the 
    UEM Client
     and/or 
    BlackBerry Dynamics
     apps on users’ devices (see the software requirements). Whether sideload detection is initiated by the 
    UEM Client
     or a specific 
    BlackBerry Dynamics
     app depends on the device activation type and the authentication delegate configured in the 
    BlackBerry Dynamics
     profile.
  • The following settings are recommended based on device activation types:
    Activation type
    Recommended settings
    Android Enterprise
    In the 
    BlackBerry Dynamics
     profile that is assigned to users:
    • Enable "Enable 
      UEM Client
       to enroll in 
      BlackBerry Dynamics
      ." This setting is enabled by default in new 
      BlackBerry Dynamics
       profiles that you create.
    • Enable “Do not require password” for 
      Android
       devices. This allows the 
      UEM Client
       to run activities in the background without prompting the user for a 
      BlackBerry Dynamics
       password.
    • Configure the 
      UEM Client
       as the authentication delegate. If a sideloaded app is detected and the configured compliance action is to prevent 
      BlackBerry Dynamics
       apps from running, the 
      UEM Client
       can block all 
      BlackBerry Dynamics
       apps until compliance is restored.
    Note that for this activation type, sideload detection is always performed by the 
    UEM Client
    .
    Samsung Knox
    In the 
    BlackBerry Dynamics
     profile that is assigned to users, configure a 
    BlackBerry Dynamics
     app that runs in the work space as the authentication delegate. This enables one 
    BlackBerry Dynamics
     app to manage authentication, sideload detection, and compliance enforcement on behalf of all 
    BlackBerry Dynamics
     apps.
    MDM controls
    In the 
    BlackBerry Dynamics
     profile that is assigned to users:
    • Enable "Enable 
      UEM Client
       to enroll in 
      BlackBerry Dynamics
      ." This setting is enabled by default in new 
      BlackBerry Dynamics
       profiles that you create.
    • In the 
      BlackBerry Dynamics
       profile that is assigned to users, configure the 
      UEM Client
       as the authentication delegate. This enables the 
      UEM Client
       to manage sideload detection and compliance enforcement on behalf of all 
      BlackBerry Dynamics
       apps. This configuration is not required if no 
      BlackBerry Dynamics
       apps (aside from the 
      UEM Client
      ) are installed on a device.
    Note that with this activation type, device-level compliance actions (for example, Untrust) are not applicable. Compliance actions for 
    BlackBerry Dynamics
     apps are applicable.
    User privacy
    In the 
    BlackBerry Dynamics
     profile that is assigned to users:
    • Enable "Enable 
      UEM Client
       to enroll in 
      BlackBerry Dynamics
      ." This setting is enabled by default in new 
      BlackBerry Dynamics
       profiles that you create.
    • Verify that “Do not require password” for 
      Android
       devices is not enabled, for security purposes. Notify users that they will have to specify a 
      BlackBerry Dynamics
       password when prompted.
    • Configure the 
      UEM Client
       or a specific 
      BlackBerry Dynamics
       app as the authentication delegate. The 
      UEM Client
       is recommended because it can run in the background. The authentication delegate can authenticate any 
      BlackBerry Dynamics
       app on the device and will manage sideload detection on behalf of all 
      BlackBerry Dynamics
       apps. If a sideloaded app is detected and the configured compliance action is to prevent 
      BlackBerry Dynamics
       apps from running, the authentication delegate can block all 
      BlackBerry Dynamics
       apps until compliance is restored. 
    • If you do not configure an authentication delegate, malware scanning will be performed by the 
      UEM Client
       and each 
      BlackBerry Dynamics
       app, which can consume device resources.
    Device registration for 
    BlackBerry 2FA
     only
    Sideload detection is not applicable to this activation type.