Staging BigFix Agents for delivery

Learn how to pre-stage and deploy the latest version of the BigFix Agent on the MDM Server.

MCM can be used to deploy BigFix Agents on the enrolled macOS® or Windows 10 devices.

For macOS, a Fixlet is available for each released version of the BigFix Platform. Stage the package against the MDM Server before any Mac devices are enrolled. The BigFix WebUI deploys the latest timestamped BigFix Agent on the MDM Server in this directory: /var/opt/BESUEM/packages. The deployment happens on the MDM Server that was staged through the BESUEM Fixlet - Stage BigFix Client packages for Mac on MDM Server.

For Windows, a custom MSI package must be prepared that includes the site masthead, and if required, set the Authenticating Relay information with the client settings to deploy the BigFix Agent action through WebUI correctly. Each package is unique and different for each user. For this version of MCM, the package that is to be deployed on Windows 10 devices must be manually copied to the /var/opt/BESUEM/packages folder on the MDM server.

After the installation, you can find the base MSI on the BigFix server. You can repeat the procedure for both macOS and Windows packages every time an updated version of BigFix Agent becomes available.

For installing the BES server installation on Windows, the installer copies a BigFix Agent in to the BigFix Enterprise\BES Installers\ClientMSI folder, but without a masthead (configuration profile for the BigFix Agent). To install a BigFix Agent with a preconfigured masthead, complete these steps:
  1. Locate the MSI that is installed with the server component.
  2. Copy the masthead.afxm file and the MSI file into a new folder on a Windows machine to add the masthead to the MSI.
  3. Run the BESClientSetupMSI.exe command and follow the instructions from the installer to add the masthead.
  4. Optionally add authenticating relay command details if you have an authenticating relay BESClientSetupMSI.exe /secureregistration <RELAY_PASSWORD> /relayserver1 http://<RELAY_HOST>:52311/bfmirror/downloads/ <TARGET_MSI> to the MSI file.
  5. Upload the BigFixAgent.msi file to the /var/opt/BESUEM/packages folder on the MDM Server.