Install and manage MCM and BigFix Mobile components

You can set up MDM server through WebUI or by running the appropriate fixlets from the BESUEM content site. For instructions on setting up the MDM server through BESUEM fixlets, see Installing MDM server. You can find instructions on setting up through WebUI in this section.

To set up and manage MDM components:
  • Ensure that you are a Master Operator (MO)
  • From the MDM application in WebUI, click Jump To > Admin

Install MDM server: You can either install standalone versions of Windows, Apple®, or Android MDM server. You can also add capabilities to the MDM server to manage a combination of these operating systems. You can Before installing MDM server, do the following:
  • Install Docker Engine, Docker Compose, and OpenSSL.
  • Install BES client on the target computer in which you want to install MDM server. This is because you need to install MDM server through WebUI or Fixlets.

Add capability: For MDM servers with only one component installed (Windows, Apple, or Android), you can add the missing component.

Install MDM Plugin: Installing MDM Plugins is required to set up a connection between the MDM Servers and the BigFix Plugin Portal. MDM Plugins communicate with the MDM Server through REST APIs and the AMQP protocol using client certificates. MDM Plugins are available to manage Apple, Windows, and Android devices.

Before installing MDM Plugin:
  • Ensure that the server host is running the Plugin Portal version 10.0.2 or later
  • Ensure BigFix agent version 10.0.2 or later is running locally. For details about installing the BigFix Client, see Installing the BigFix components.
  • Ensure you have required credentials, specifically from cacert, the client cert, and the client key that is generated from For details, see MDM SSL certificates.
  • Ensure you have TLS certificate and MDM Push credentials of various forms for Apple, Windows and Android servers.

Update: Update MDM servers and Plug ins as necessary. See update MDM components.

Uninstall: At any point in time, you can uninstall MDM components from WebUI. Note that uninstalling MDM components removes the capability to manage some or all of the enrolled devices.