Features added in the previous releases

MCM and BigFix Mobile v3.1 updates

Mobile App Catalog

The Mobile App Catalog provides a central point for maintenance of all supported MCM Mobile Applications. When a macOS or Windows application is uploaded to the app catalog, it is automatically staged on the MDM servers. Previously it had to be uploaded and then staged from the Admin section of MCM WebUI. Settings can be defined globally where all the applications will inherit them. This can be overwritten at application level and only apply to individual applications. For more information, see App Catalog.

Mobile Application Configuration

App Config Support allows specific mobile Application configuration to be defined and pushed at the time the app is installed through MDM. This allows it to be installed with the correct internal configuration already in place. For more information, see App configuration.

Okta Device Trust​

The Device Trust feature from BigFix Mobile prevents unmanaged devices from accessing enterprise services. It provides an extra layer of security to your organization's application access and protects against potential threats from compromised devices. For more information, see Device trust.

Kiosk Mode Support for Phones and Tablets​

Kiosk Mode allows locking a device to only be able to run one, or a small set of applications. It turns an Android or Apple phone or tablet into a dedicated device that can only run the specified app(s). Kiosk devices are powerful and interactive self-service terminals designed to streamline and enhance user experiences in various settings. These dedicated devices provide a simplified and intuitive interface for users to access specific applications, information, or services. Kiosks are commonly found in retail stores, airports, hotels, healthcare facilities, educational institutions, and other public spaces. For more information, see Kiosk management.

BigFix 11 SHA-384 Signed Content Support

MCM v3.1 has been tested for BigFix 11. BESUEM and BESUEM Mobile sites are republished with SHA-384 signatures. Part of the MCM v3.1 publishing process will add the SHA-384 signing process to the site content.​

MCM and BigFix Mobile v3.0 updates

Windows Active Directory and Hybrid Domain Join

BigFix MCM supports Active Directory and Hybrid Domain Join through Offline Domain Join (ODJ) service. Hybrid Domain Join enables organizations to leverage existing on-premises Active Directory infrastructure while taking advantage of the benefits of cloud-based authentication and management. When enabled, users can sign in to their devices using their on-premises credentials, and then access cloud-based resources without having to enter additional credentials. For setup and configuration information, see Domain join installation and configuration.

Custom Templates

With MCM v3.0 release, WebUI provides a set of custom policy templates suitable for Windows, Apple, and Android that you can directly save or modify to create custom policies. For more information on how to create custom policies through available custom templates, see Custom from Template.

User-based endpoint targeting and enrollment

With MCM v3.0, you can target specific set of users and end-user devices to deploy specific MDM policies and actions. BigFix MCM integrates Active Directory Group Membership and Attributes to create Smart Groups. Smart Groups in association with Policy Groups evaluate applicable users and endpoints (based on group membership, attributes, device type, enrollment type and so on) to target and deploy policies and actions during enrollment or post enrollment. For information on how to create Smart Groups through WebUI, see Smart Groups.

Secure certificate deployment through Simple Certificate Enrollment Protocol (SCEP)

IT admins can now automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption by integrating SCEP with BigFix MCM. To understand the SCEP enrollment flow, see SCEP enrollment. To configure SCEP, see Simple Certificate Enrollment Protocol (SCEP) configuration.

Apple User Enrollment for BYOD

With MCM v3.0, device users can enroll their own Apple devices. This allows the organizations to securely manage the work profile on those devices while the device users can enjoy the privacy on their personal profile as organizations cannot wipe, lock, or otherwise impose control over their personal profile. For more information, see Apple BYOD enrollments.

Apple VPP Apps and Books Support

IT Admins can manage custom apps, Apple Appstore apps to User Enrolled devices, and company licensed-app store apps on all MCM enrolled Apple devices, as MCM is now integrated with the Apps and Books (VPP) capabilities in Apple Business Manager. For more information, see Apple VPP Apps.

SAML-authenticated enrollment

BigFix MCM and BigFix Mobile support Security Assertion Markup Language (SAML) authentication to enroll devices. The user's SAML credentials are used to authenticate their identity to complete the enrollment process. With MCM v3.0 release, Okta is tested and supported as a SAML identity provider with AD/Open LDAP and Azure AD as identity services. For more information, see SAML-authentication configuration.

Android - Additional features supported

Cross-profile management: BigFix Mobile supports Android crossprofile management through which organizations can protect and control data sharing from work profile to personal profile in the same device. For more information, see Cross-profile management.

Password Wipe: From MCM v3.0 onwards, Password Wipe support is extended for Android mobile devices. For instructions, see Passcode Wipe.

Other enhancements

• Primary User Assignment: You can now assign or modify primary user for a device through User Assignment action. When a device has primary user info, it can be easily managed through Smart Groups. If you want to assign primary user for huge number of devices, contact HCL Support at BigFixServices@hcl.in
• Enrollment UI Rebranding: You can change the appearance of the Enrollment UI and Android Server Configuration UI by changing the color, image, logo, brand name and so on. For instructions, see Rebranding user interfaces.

MCM and BigFix Mobile v2.1.3 updates

MCM and BigFix Mobile v2.1.1 updates

This section lists updates on features that are applicable for both MCM and BigFix Mobile in this release.

MCM and BigFix Mobile v2.1 updates

This section lists updates on features that are applicable for both MCM and BigFix Mobile in this release.

Added operating systems Support

This version additionally supports the following operating systems:

• Android 12
• iOS/iPadOS 15
• Windows 11
• macOS Monterey 12

MCM 2.1 Updates

BigFix Mobile 2.1 Updates

This section lists updates on features that are applicable for BigFix Mobile in this release.

Android dedicated device support

From UEM 2.1 release, BigFix Mobile supports Android dedicated devices. Now, you can enroll and manage company-owned devices in Kiosk mode. For more information, see Dedicated device management section in Android mobile management.

Android Advanced feature set support

This release supports the following Android features:

• Verify Apps enforcement - Scans all the apps installed on Android device for harmful software before and after they are installed to ensure that malicious apps can not compromise corporate data. For more information, see Verify Apps enforcement.
• VPN Management: Allows IT admins to ensure that data from certain apps always goes through the VPN specified. They can also apply a setting such that device is connected to the network only when VPN is connected. For more information, see VPN management
• WiFi Configuration management:
  • Allows IT admins to silently provision enterprise WiFi configuration on managed devices.
  • Allows IT admins to lock down WiFi configurations on managed devices, restricting the users from creating new configurations or modifying the existing corporate configurations.
  For more information, see WiFi configuration management.

• Private app management: IT Admins can add and manage private apps for Android Enterprise devices via Managed Google Play. For more information see, Private and custom app deployment.

• Hardware Security management: IT Admins can lock down hardware elements of a company-owned device to ensure data and device security. For more information see, Android hardware security

Advanced Android Zero Touch enrollments

• Android Zero Touch enrollments are made much more easier with Zero Touch Automatic configurations. Also, IT admin to automate much of the device enrollment process. See Automatic zero-touch configuration.
• With Sign-in URLs, IT admins can limit enrollments to specific accounts or domains. See User-authenticated zero-touch enrollment configuration.

EMM Managed Android Enterprise account

Creating Android Enterprise account is simpler than before, as the organizations do not need a Google account. For more information, see Managed Google Play Accounts enterprise.

Clear passcode for iOS/iPadOS

UEM 2.1 release includes a WebUI action to facilitate system admins to remotely wipe passcode on iOS and iPadOS devices. If device users forget their Apple device password, this feature helps them to get back and use the devices, For instructions, see Deploy MCM actions of the WebUI User Guide.