Welcome
Installing and Configuring BigFix Mobile and MCM
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
Remote Access
The Remote Access feature in BigFix Modern Client Management (MCM) allows administrators to view the screen of managed mobile devices through the BigFix WebUI for troubleshooting and support purposes.
Installing and Configuring the TURN Server
The Remote Access feature in BigFix Modern Client Management (MCM) requires a TURN server to establish reliable WebRTC sessions between administrator browsers and managed devices.
Configuring the Coturn Server
Modify the network identity, port assignments, and authentication secrets for an active Coturn server.

BigFix Documentation Homepage
Modern Client Management and BigFix Mobile
Welcome to the Modern Client Management and BigFix Mobile documentation, where you can find information about how to install, maintain, and use Modern Client Management and BigFix Mobile.
BigFix Mobile and MCM Overview
Discover how BigFix Mobile and Modern Client Management (MCM) extend unified endpoint management to mobile devices and modern OS platforms like iOS, Android, and Windows 10+, all from a single console.
Guides in PDF format
This section contains links to PDF versions of all the MCM and BigFix Mobile manuals.
Installing and Configuring BigFix Mobile and MCM
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
- MCM and BigFix Mobile server and components installation
  This guide provides instructions for installing the MCM and BigFix Mobile server along with its components, ensuring proper setup and configuration.
- Identity Service Configuration
  Configure identity services for BigFix Mobile and MCM to enable secure authentication and seamless user access. Learn how to integrate with identity providers and streamline user management across Apple, Android, and Windows devices.
- Simple Certificate Enrollment Protocol (SCEP) configuration
  BigFix MCM supports certificate management and certificate-based authentication through Simple Certificate Enrollment Protocol (SCEP). SCEP is the fastest and most secure way to provision certificates to all your MCM-managed devices. With SCEP, IT Admins can automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption.
- Domain join installation and configuration
  Read this section to learn the prerequisites and the tasks to install ODJ service to set up your environment to enroll Windows devices and join Active Directory domain or both Active Directory and Azure AD domain.
- SAML-authentication configuration
  MCM and BigFix Mobile supports Security Assertion Markup Language (SAML) authentication to enroll devices to protect sensitive data and ensure secure access to corporate resources.
- Remote Access
  The Remote Access feature in BigFix Modern Client Management (MCM) allows administrators to view the screen of managed mobile devices through the BigFix WebUI for troubleshooting and support purposes.
  - Recommended System Requirements
    The following recommendations are based on supporting ~100 concurrent Remote View (screen streaming) sessions using Coturn. These values assume TURN relay usage (worst-case scenario), where all traffic flows through the TURN server.
  - Installing and Configuring the TURN Server
    The Remote Access feature in BigFix Modern Client Management (MCM) requires a TURN server to establish reliable WebRTC sessions between administrator browsers and managed devices.
    - Configuring the Coturn Server
      Modify the network identity, port assignments, and authentication secrets for an active Coturn server.
  - TURN Configuration for MDM
    Understand how a TURN (Coturn) server enables reliable Remote View connectivity for managed devices in restricted network environments.
  - Configure MDM Server with TURN (Coturn)
    This section describes how to associate the MDM Server with a configured TURN (Coturn) server. This step ensures that Remote View sessions use the correct TURN endpoint for establishing connectivity between the browser and managed devices.
  - Updating the Coturn Service
    This section describes how to update an existing Coturn server to the latest version using BigFix Modern Client Management (MCM).
  - Uninstalling the Coturn Service
    Remove and permanently delete all components, images, and data of the Coturn Service for BigFix Mobile from a target server.
Deployment Guide
This document provides guidance for deploying the certificate enrollment infrastructure required for BigFix Mobile Configuration Management (MCM). It describes how to integrate BigFix MCM with Microsoft certificate services to enable device certificate enrollment using the Simple Certificate Enrollment Protocol (SCEP).
Quick Start
This quick start guide gets you up and running with your BigFix MCM and BigFix Mobile solution. It helps you secure, configure, and manage your mobile devices quickly and efficiently.
User Guide
Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
Glossary
This glossary provides terms and definitions for the BigFix software and products.

Configuring the Coturn Server

Modify the network identity, port assignments, and authentication secrets for an active Coturn server.

Before you begin

The Coturn service must be previously installed via the Install page.
You must have the Public IP address and FQDN of the host server ready.

About this task

Access the configuration interface at: Configure Coturn Server.

Procedure

In the Modern Client Management side menu, navigate to Admin > Coturn Service > Configure Coturn Server.
In the Target Devices section, click Select and choose the Coturn host.
Update the Server Address and External IP Address fields.

Tip: Use a Public IP (e.g., 203.0.113.10) to ensure devices outside the local network can establish remote sessions.
Configure the Network & Ports:
1. Verify the TCP/UDP Port (Default: 3478).
2. Specify the Media Ports range (Min: 49152, Max: 49252).
Enter a new Authentication Secret.
Click Update.

Results

The configuration action is sent to the target device. Once successful, the Coturn service restarts with the new parameters.

What to do next

What's Next: If you modified the Secret or Address, navigate to the Configure MDM Server page to re-sync the MDM server with these updated Coturn credentials.