What’s new - Latest Features & Enhancements

Activation Lock management for iOS

Starting with version 3.4, BigFix Mobile enhances Activation Lock management for iOS devices by supporting both device-based and user-based activation lock configurations. This enhancement helps maintain consistency with enterprise security policies and improves help desk efficiency when managing lost or stolen devices. For complete information and the steps to activate and deactivate the activation lock, refer to Activation Lock.

Customer-Managed Enterprise (CME) Registration for Android

BigFix Mobile now supports Customer Managed Enterprise Registration for Android. This feature enables organizations to independently manage their enterprise registration and enable conditional access.

Key Enhancements:

• Domain/GWS Binding: Customers can now bind the enterprise accounts with their Google Workspace.
• Seamless Integration: Customer-managed enterprise registration will be seamlessly integrated with existing BigFix Mobile workflows, including enrollment, policy management, and device provisioning.

For detailed steps to integrate your GWS, refer to Customer Managed Enterprise Registration

Enhanced MCM Server Installation

The MCM server installation process has been redesigned to deliver a simpler, faster, and more predictable setup experience.

Key Enhancements:

• Environment Readiness Validation: Installation proceeds only on validated environments, with clear feedback for unmet prerequisites.
• Simplified Workflow: Reduced and streamlined installation steps to minimize setup complexity and faster installation.
• Reduced Support Tickets: The improved prerequisite scan and guidance are expected to lower installation-related support requests.

For detailed instructions for installing the MCM Server, refer to On-premises deployment setup.

Health Check Enhancements

Health Check in BigFix Mobile and MCM v3.4 introduces more accurate MDM Server status display, enhanced analyses to show detailed operational state (opstate) information, clickable indicators for in-depth troubleshooting, improved UI consistency, and better usability features like time format adjustments and scroll bars.

Key Enhancements:

• Detailed Opstate Info: Granular insights for Apple, Android, Windows MDM servers and Plugin.
• Enhanced Analyses: MDM server analyses now expose more detailed opstate data.
• Specific Problem Detection: Flags issues with WNS certs, LDAP, RabbitMQ, or Google API.
• Clear Indicators: Color‑coded (Green, Yellow, Red) status for quick health assessment.
• Drill‑down Troubleshooting: Click yellow/red indicators to see detailed issue breakdowns.
• Version Reporting: Displays installed versions of MDM servers and Plugin.
• Agent Deployment Readiness: Shows if BigFix Agent packages (.msi/.pkg) are staged.
• MDM URLs: Displays configured Apple and Windows MDM URLs.
• Root Server Status: Confirms PPKG file creation on the BES Server.
• Readable Timestamps: Plugin status timestamps now in 12‑hour format.
• Scrollbar for Long Names: Added to server table for lengthy server names.

Private App Versioning for Android

BigFix Mobile now supports corporate app versioning for internal (private) Android apps (APKs), allowing controlled rollout and testing before production release.

Key capabilities:

• Deploy apps to Alpha or Custom tracks before production rollout.
• Link app deployment to policies for version control.
• Promote tested builds to production without rebuilding APKs.
• Target specific user groups with different app versions.
• Improve app stability and testing workflows.

For more information, refer to Android private app version management.

Miscellaneous enhancements

Additional performance, UI, and stability improvements have been made across BigFix Mobile and MCM to enhance overall usability and reliability.

• Automatic Mac User Account Creation During DEP Enrollment
  • Introduced an option to automatically create a macOS user account during DEP enrollment. Disable this option to prompt users for manual account creation.
  • Uses the password entered during MDM enrollment for account setup.
• SCEP Certificate Enhancements
  • Enhanced support for secure certificate enrollment and management. See KB5014754: Certificate-based authentication changes on Windows domain controllers
  • Ability to deliver User-Scoped certificates at time of DEP Enrollment
• Additional DEP Profile Skip Options
  • More setup screens can now be skipped during macOS DEP enrollment for a faster, smoother setup experience.
• Proxy Support for NDES and AD Connections
  • Enabled secure communication with certificate and directory services through proxy servers.

Defect Fixes