Welcome
How-to guide
This section provides step-by-step instructions for setting up a BigFix environment, focusing on integration with third-party prerequisites such as Apple Business Manager and Google Play. It guides users through the necessary configuration steps to ensure seamless interoperability with these external services.
Windows Autopilot configuration guide
This guide provides step-by-step instructions for configuring Windows Autopilot, tailored for BigFix Admins and IT teams. It covers both manual setup in the Azure portal and automated configuration using the autopilotcli tool, ensuring a streamlined deployment process.
Generate MDM PARAM 9.enc File
This topic describes how to generate the MDM_PARAM_9.enc file on the MDM server using a specified secret and the BESencrypt command. It also outlines the requirement to update the tenant ID and client ID in the autopilot configuration file.

BigFix Documentation Homepage
Modern Client Management and BigFix Mobile
Welcome to the Modern Client Management and BigFix Mobile documentation, where you can find information about how to install, maintain, and use Modern Client Management and BigFix Mobile.
BigFix Mobile and MCM Overview
Discover how BigFix Mobile and Modern Client Management (MCM) extend unified endpoint management to mobile devices and modern OS platforms like iOS, Android, and Windows 10+, all from a single console.
Guides in PDF format
This section contains links to PDF versions of all the MCM and BigFix Mobile manuals.
Installing and Configuring BigFix Mobile and MCM
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
Deployment Guide
This document provides guidance for deploying the certificate enrollment infrastructure required for BigFix Mobile Configuration Management (MCM). It describes how to integrate BigFix MCM with Microsoft certificate services to enable device certificate enrollment using the Simple Certificate Enrollment Protocol (SCEP).
How-to guide
This section provides step-by-step instructions for setting up a BigFix environment, focusing on integration with third-party prerequisites such as Apple Business Manager and Google Play. It guides users through the necessary configuration steps to ensure seamless interoperability with these external services.
- Apple Business Manager Quick Start Guide for DEP
  The purpose of this document is to provide a quick start into the Apple Business Manager (ABM) portal steps required to get macOS devices enrolled into MCM and iOS and iPadOS devices enrolled to BigFix Mobile using Apple Device Enrollment Program (DEP).
- How to create a Microsoft developer account
  You need Microsoft developer account to create WNS credentials. WNS credentials is needed to install or upgrade Windows MDM server and utilize BigFix MCM features.
- Windows Autopilot configuration guide
  This guide provides step-by-step instructions for configuring Windows Autopilot, tailored for BigFix Admins and IT teams. It covers both manual setup in the Azure portal and automated configuration using the autopilotcli tool, ensuring a streamlined deployment process.
  - Configure HCL BigFix MDM in Azure portal
  - Configure Autopilot group
    Configuring an Autopilot group in the Microsoft Azure portal allows you to organize and manage devices by assigning them to dynamic groups based on specific rules. This process streamlines device management by automatically adding devices to the group as they are imported. Once configured, the Autopilot group is ready for further deployment profile setup.
  - Configure Autopilot Group using autopilotcli
    This topic explains how to configure an Autopilot group using the autopilotcli tool by editing the autopilotconfig.json file in the specified directory. It provides a sample profile creation object and outlines the group creation command.
  - Configure Autopilot deployment profile
    This topic describes how to configure an Autopilot deployment profile using Microsoft Endpoint Manager. The profile is automatically applied when a device is enrolled, enabling streamlined device setup and management. Step-by-step instructions guide you through profile creation, assignment, and verification.
  - Configure Autopilot deployment profile using autopilotcli
    This topic describes how to configure an Autopilot deployment profile using autopilotcli by editing the autopilotconfig.json file and executing the appropriate command. It outlines the required profile settings, provides a sample configuration, and explains how to assign and review the profile within the management console.
  - Configure Autopilot devices and assign users
    Configure Autopilot devices by collecting the device Hardware ID, importing device details into the Microsoft Endpoint Manager admin center, and assigning users to each device. This process ensures devices are properly registered and ready for user enrollment through Windows Autopilot. After configuration, users can complete enrollment by signing in and connecting to the internet.
  - Configure Autopilot devices using autopilot cli
    This topic explains how to configure Autopilot devices using the autopilot CLI by providing a device CSV file as input. It includes command examples, file location requirements, and troubleshooting steps for resolving CSV format issues between Windows and Linux environments.
  - Configure Client Secret
    This topic describes how to configure a client secret in the on-premises MDM application. It outlines the steps to access the Certificates & Secrets section, create a new client secret, and save its value for future use.
  - Generate MDM PARAM 9.enc File
    This topic describes how to generate the MDM_PARAM_9.enc file on the MDM server using a specified secret and the BESencrypt command. It also outlines the requirement to update the tenant ID and client ID in the autopilot configuration file.
- Windows Errors
  This topic provides a list of common errors encountered when enrolling Windows endpoints using Windows MDM through BigFix MCM. It includes links to detailed information on Windows MDM errors, WinHTTP errors, XML parsing errors, and Windows BITS client errors.
- Sample Android Custom Policies
  This topic provides sample Android custom policies in JSON format for use with BigFix WebUI, covering configurations such as kiosk mode, Wi-Fi restrictions, app verification, and VPN setup. Each policy can be modified to meet organizational requirements and includes guidance for uploading and assigning policies. Reference links to official documentation are provided for further customization and policy details.
Quick Start
This quick start guide gets you up and running with your BigFix MCM and BigFix Mobile solution. It helps you secure, configure, and manage your mobile devices quickly and efficiently.
User Guide
Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
Glossary
This glossary provides terms and definitions for the BigFix software and products.

Generate MDM PARAM 9.enc File

This topic describes how to generate the MDM_PARAM_9.enc file on the MDM server using a specified secret and the BESencrypt command. It also outlines the requirement to update the tenant ID and client ID in the autopilot configuration file.

Generate MDM_PARAM_9.enc in MDM server in /var/opt/BESUEM/certs using the client secret.

Command:

/opt/BESUEM/BESencrypt -instr=”b-jMt.B1HX” -outfile=/var/opt/BESUEM/certs/MDM_PARAM_9.enc;

Update the tenant ID and client ID in var/opt/autopilotconfig.json