Install BigFix MDM Service for Android

Learn how to install BigFix MDM Service for Android through WebUI.

Before you begin

This procedure is for a first time installation of an MDM Service on the MDM Server. If you have already installed one of the MDM Services, use Manage MDM server capability option to add an additional MDM service, as some of the configuration is common to all MDM Services and should not be re-supplied for each MDM Service installed.

These prerequisites must be met to install the BigFix MDM Server for Android endpoints:

About this task

To install BigFix MDM server for Android endpoints:
  1. From the WebUI main page, select Apps > MCM.
  2. On the Modern Client Management page, click Admin.
  3. On the Admin page, from the left navigation, under MDM Servers, select Install.
  4. Select Target Device. Click Select and select an appropriate target to install the MDM server on.
  5. Server Install Type: For Select OS, select Android.
    Install MDM Server
  6. Install Parameters:
    • Organization Name: Enter a string. While enrolling a device, the organization name entered here displayed to the users along with the rest of the profile information.
    • User Facing Hostname: For over the air enrolls, this is the hostname of the server where users can visit to enroll in MDM. For over the air enrolls, this is the hostname of the server where users can visit to enroll in MDM. The value must be a valid FQDN that is accessible from the Internet. For example, mdmserver.deploy.bigfix.com.
      Note: https:// should not be included here.
      This is also where some Android Admin configuration takes place. See Enroll to Managed Google Play Accounts enterprise.
  7. TLS Credentials: Enter the details of the MDM Server TLS certificate and key contents.
    1. TLS Key Password: Enter a string to set the password to encrypt the TLS key.
    2. TLS Certificate: Click Upload File and browse through the location to select the TLS .crt or .pem file.
    3. TLS Key: Click Upload File and browse through the location to select the unencrypted TLS .key file that was previously saved. Refer to BigFix MDM Server TLS Certificate Content.
  8. For non G-Suite accounts, Android Server Admin Credentials are required. For G-Suite accounts, the Google Gsuite Credentials are required.
    Note: Either the Android Server Admin Credentials or the Google Gsuite Credentials are required, not both. The UI stops you if you try to enter both.
    Android Server Admin Credentials:
    1. Android Server Admin Username: Enter a string to set the Admin UI user name.
    2. Android Server Admin Password: Enter a string to set the Admin UI password.
      Important: Set a strong and complex password (For example, at least 12 characters long - the longer, the better; has a combination of upper and lowercase letters, numbers, punctuation, and special symbols) for better application security.
    For more information on how to generate googlecredentials.json file, see Enroll to Managed Google Play Accounts enterprise.

    or

    Google GSuite Credentials: Click Upload file and browse through the file location to select the googlecredentials.json file.
  9. Click Install.
Results: This action completes these activities:
  1. Downloads a set of Podman images from software.bigfix.com which is needed for the MDM installation.
  2. Installs the services and certificates including the Plugin certificates and the TLS certificate on which the server runs.
  3. Applies all required configurations.