Home
Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
Troubleshooting
This section is intended to help you solve problems that might occur when installing BigFix MCM and BigFix Mobile.
Android Kiosk not connected to Internet
Read this section to troubleshoot Android Kiosk Wi-Fi connection issues.

Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
- Modern Client Management and BigFix Mobile
  This guide is intended for HCL BigFix Master Operators (MO) and those who administer BigFix deployments. If you are looking for information about using Modern Client Management (MCM) and BigFix Mobile, see the WebUI User's Guide.
- BigFix MCM
  Read this section to learn enrolling and managing Windows and macOS desktop and laptop devices.
- BigFix Mobile
  BigFix Mobile enables you to enroll and manage Android, iOS, and iPadOS devices.
- SCEP Certificate-based authentication
  BigFix MCM supports certificate-based authentication through Simple Certificate Enrollment Protocol (SCEP). SCEP is the fastest and most secure way to provision certificates to all your MCM-managed devices. With SCEP, IT Admins can automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption.
- SAML-authenticated enrolment flow
  When you configure SAML as the authentication method, when a user hits the enrollment URL and click Enroll, the user is first authenticated via the identity provider before proceeding with the enrollment process.
- Application management
  Application management in BigFix MCM enables IT admins to centrally control, distribute, and maintain Windows and macOS applications. It allows IT administrators to streamline the deployment, update, and security of apps on enrolled devices.
- Email configuration management
  With BigFix MCM and BigFix Mobile, you have the ability to install and set up email application that can connect to your email system. This allows users to easily connect, verify their identity, and synchronize their work email accounts on their devices.
- VPN management
  BigFix MCM and BigFix Mobile enable organizations to manage and configure Virtual Private Network (VPN) settings on enrolled Android, Apple, and Windows devices, ensuring secure remote access to corporate networks.
- Wi-Fi configuration management
  BigFix MCM and BigFix Mobile offer WiFi configuration management, where administrators can control and configure the wireless network settings on MCM-enrolled devices. This helps organizations to maintain a secure and reliable wireless network infrastructure while providing flexibility for users to connect to authorized networks.
- Known limitations
  Read this topic to get familiarized with MCM v3.0 known limitations.
- Troubleshooting
  This section is intended to help you solve problems that might occur when installing BigFix MCM and BigFix Mobile.
  - Verify if PPKG generation point is set for bulk enrollment
    To troubleshoot bulk enrollment issues, ensure if the targeted device is designated as the provisioning package generation point.
  - Enrollment fails with 401 authentication error
    Learn how to resolve the issue when the enrollment fails with 401 authentication error when there is no issue with LDAP.
  - Policy is deployed, but is not effective on the device
    This page provides information to troubleshoot the issue if a policy is deployed but is not effective on the device.
  - Apple profile displayed as unverified
    Read this section to troubleshoot if the Apple mobile displays the deployed Apple profile as “Unverified.”
  - Android Kiosk not connected to Internet
    Read this section to troubleshoot Android Kiosk Wi-Fi connection issues.
  - Endpoint not disconnected from AD after unenrollment
    Read this page to remove an ODJ-enrolled endpoint from Active Directory (AD) on unenrollment to prevent it from accessing network resources.
  - Health Check MDM Plugin Status is not displayed properly
    Read this section to troubleshoot when WebUI Health Check MDM Plugin Status section keeps loading for longer time and does not display the required information.
  - Generating Encryption Recovery Key Escrow fails
    Read this page to troubleshoot Encryption Recovery Key Escrow generation failure when the BigFix Server is installed on RHEL 10.0.
  - Setting the Home Page for MicroSoft Edge on Windows
    You can set the home page for Microsoft Edge on Windows 10 and Windows 11 devices by using the restriction policy through the WebUI.
- Frequently Asked Questions
  Read this section for commonly asked questions and their answers to manage the MCM deployments better.

Android Kiosk not connected to Internet

Read this section to troubleshoot Android Kiosk Wi-Fi connection issues.

Problem

Android Kiosk does not get connected to the Internet. Device user is unable to modify the Wi-Fi settings, as it is restricted in Kiosk mode.

Cause

If an Android device boots into an app in Kiosk mode, and if the Wi-Fi network configured in the enrollment policy is not available, the device does not get connected to Wi-Fi network.

Solution

IT admin can configure the enrollment policy to enable the device user to temporarily connect to an available network and refresh Wi-Fi configuration with active settings.

Note: The temporary Wi-Fi connection is only for fetching the latest policy with active Wi-Fi configuration details. Once the latest Wi-Fi configuration policy is applied, the Kiosk device automatically connects to the network as specified in the policy.

To do that, complete the following steps:

Ensure the setting "networkEscapeHatchEnabled": true is configured in the dedicated device enrollment policy. After booting, if the network connection fails, within 90 seconds, this setting prompts the user to temporarily connect to an available network to refresh the device policy.

For the device to get a permanent network connection, add the Wi-Fi configuration policy with active Wi-Fi information.

Sample Wi-Fi configuration policy:

"openNetworkConfiguration": {
  "NetworkConfigurations": [{
    "GUID": "a",
    "Name": "Example A",
    "Type": "WiFi",
    "WiFi": {
      "SSID": "NetworkID",
      "Security": "WEP-PSK",
      "Passphrase": "1234567890"
      "AutoConnect": true
    }
  }]
}

If the device does not connect to the Wi-Fi network automatically, restart the Kiosk device and wait for 1 to 2 minutes. The device gets connected to the Wi-Fi network as defined in the new Wi-Fi configuration policy.