Home
Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
BigFix Mobile
BigFix Mobile enables you to enroll and manage Android, iOS, and iPadOS devices.
Application management
With the application management capability in BigFix Mobile, you can administer, distribute, and control mobile applications on your enrolled Android and iOS mobile devices. You can add and assign apps to devices, protect company data in apps, force install work apps which do not require user permission, and do much more. smooth app distribution and effective management on Android and iOS devices.
Private and custom app deployment
Private and custom apps are internal apps that are built for your organization and distributed to your enterprise users. You can add and manage private apps for Android Enterprise devices via Managed Google Play and custom apps for Apple Enterprise devices via Apple Business Manager. This feature is supported on all Enterprise deployment scenarios: Device Owner (DO), Profile Owner (PO), and Corporate-Owned Single-Use (COSU).

Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
- Modern Client Management and BigFix Mobile
  This guide is intended for HCL BigFix Master Operators (MO) and those who administer BigFix deployments. If you are looking for information about using Modern Client Management (MCM) and BigFix Mobile, see the WebUI User's Guide.
- BigFix MCM
  Read this section to learn enrolling and managing Windows and macOS desktop and laptop devices.
- BigFix Mobile
  BigFix Mobile enables you to enroll and manage Android, iOS, and iPadOS devices.
  - Android mobile management
    BigFix Mobile, the Enterprise Mobility Management (EMM) solution, is integrated with Android Enterprise. With this solution, you can effortlessly enroll and manage Android devices.
  - Apple mobile management
    With BigFix Mobile, you can seamlessly enroll iOS and iPadOS devices.
  - Device trust
    The Device Trust feature from BigFix Mobile prevents unmanaged devices from accessing enterprise services. It provides an extra layer of security to your organization's application access and protects against potential threats from compromised devices. This extra security helps ensure that your users access applications from a device that you know is trusted.
  - Application management
    With the application management capability in BigFix Mobile, you can administer, distribute, and control mobile applications on your enrolled Android and iOS mobile devices. You can add and assign apps to devices, protect company data in apps, force install work apps which do not require user permission, and do much more. smooth app distribution and effective management on Android and iOS devices.
    - Apple VPP Apps
      Apple VPP stands for Apple Volume Purchase Program. It is a program offered by Apple that allows businesses and educational institutions to purchase, distribute, and manage Apple Store apps and books in bulk for their employees or students. Through this, organizations can distribute Apple Store apps and books directly to managed Apple devices or authorized users, and keep track of what content has been assigned to which user or device.
    - Silent app distribution
      IT admins can install and manage work applications silently in BigFix Mobile managed mobile devices without any user intervention.
    - Private and custom app deployment
      Private and custom apps are internal apps that are built for your organization and distributed to your enterprise users. You can add and manage private apps for Android Enterprise devices via Managed Google Play and custom apps for Apple Enterprise devices via Apple Business Manager. This feature is supported on all Enterprise deployment scenarios: Device Owner (DO), Profile Owner (PO), and Corporate-Owned Single-Use (COSU).
  - Kiosk management
    In kiosk mode, you can lock a device, so that it can run only one or a small set of applications. This mode turns an Android or Apple phone or tablet into a dedicated device that can run only one or more specified apps. Kiosk mode provides effective control over the device use and helps ensure that the devices can be used only for intended purposes. Mobile devices can run tasks in kiosk mode by configuring the settings through a policy. This feature applies only for company owned devices. In a dedicated or supervised device, the device user can access only the apps that the kiosk policy allows.
  - OS update
    The OS update policy allows to configure rules and settings to manage the operating system updates on the enrolled devices. This policy ensures that devices receive the necessary updates for security, bug fixes, and feature enhancements, while also maintaining a consistent and secure environment for all devices within the organization. The system update policy impacts both the current and future updates for the device, including any pending system update.
- SCEP Certificate-based authentication
  BigFix MCM supports certificate-based authentication through Simple Certificate Enrollment Protocol (SCEP). SCEP is the fastest and most secure way to provision certificates to all your MCM-managed devices. With SCEP, IT Admins can automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption.
- SAML-authenticated enrolment flow
  When you configure SAML as the authentication method, when a user hits the enrollment URL and click Enroll, the user is first authenticated via the identity provider before proceeding with the enrollment process.
- Application management
  Application management in BigFix MCM enables IT admins to centrally control, distribute, and maintain Windows and macOS applications. It allows IT administrators to streamline the deployment, update, and security of apps on enrolled devices.
- Email configuration management
  With BigFix MCM and BigFix Mobile, you have the ability to install and set up email application that can connect to your email system. This allows users to easily connect, verify their identity, and synchronize their work email accounts on their devices.
- VPN management
  BigFix MCM and BigFix Mobile enable organizations to manage and configure Virtual Private Network (VPN) settings on enrolled Android, Apple, and Windows devices, ensuring secure remote access to corporate networks.
- Wi-Fi configuration management
  BigFix MCM and BigFix Mobile offer WiFi configuration management, where administrators can control and configure the wireless network settings on MCM-enrolled devices. This helps organizations to maintain a secure and reliable wireless network infrastructure while providing flexibility for users to connect to authorized networks.
- Known limitations
  Read this topic to get familiarized with MCM v3.0 known limitations.
- Troubleshooting
  This section is intended to help you solve problems that might occur when installing BigFix MCM and BigFix Mobile.
- Frequently Asked Questions
  Read this section for commonly asked questions and their answers to manage the MCM deployments better.

Private and custom app deployment

Private and custom apps are internal apps that are built for your organization and distributed to your enterprise users. You can add and manage private apps for Android Enterprise devices via Managed Google Play and custom apps for Apple Enterprise devices via Apple Business Manager. This feature is supported on all Enterprise deployment scenarios: Device Owner (DO), Profile Owner (PO), and Corporate-Owned Single-Use (COSU).

Android private apps

From WebUI, you can:

Update Google-hosted private apps
Upload new versions of apps that are already published privately to the enterprise

For the steps to upload a private Android app, see Private App.

When you publish a private app from Google iFrame:

Google creates a Play Developer account for your organization.
Private apps are automatically approved for your organization.
The apps becomes ready to distribute in less than 10 minutes.
You can click on the app icon to edit the title or to re-upload the .apk file if necessary.
For advanced editing options such as adding description and screenshots, or unpublishing apps, click Make advanced edits.
Deploy the APK on the MDM server and distribute the private app through android app policy

Apple custom apps

Custom iOS and iPadOS apps are managed in the same way as VPP apps are managed. For more information on how to manage VPP apps, see Apple VPP Apps.