BigFix - Renewing BigFix MDM TLS & Apple Push Certificates
Keeping your BigFix MDM/MCM environment secure requires annual renewal of TLS and Apple Push Certificates to maintain proper communication and functionality. This guide walks through the step-by-step renewal process to prevent disruptions.
?
Renew your TLS Certs for MDM/MCM
Locate the TLS.key you generated when you first installed the MDM server.
?
?
Find the fixlet in the BigFix Console BigFix MDM Server - Stage External TrustedCA TLS Certificates
?
Open the contents of your new TLS cert and copy the contents of the cert in notepad
?
Paste the content of the cert to the MDM Server TLS CRT content: section of the fixlet
?
Open the TLS.key in notepad and copy the contents of the TLS.key
Paste the Contents of the TLS.key in the MDM Server TLS Key section
?
Type in the Password of the TLS key
?
?Deploy the fixlet to your MDM server with the Stage option selected
?
Let the action complete on your BigFix server
?
?
Fixlet ID 701 BigFix MDM Server – Deploy staged TLS Certificates will now become relevant
?
Deploy this action once you are ready to update your MDM server to the new Certificates.? This will restart the MDM services.
?
You can check the MDM Cert in your web browser
Before
领英推荐
?
After
?
Renewal of Apple Push Certs
Email the Pushcert.csr file to [email protected] when you first stood up your Apple MDM server
?
Wait for the Signed HCL CSR email from [email protected]
?
?
?
Upload the HCL Signed CSR file that was emailed back to you
?
Download the new Apple Push Cert
?
Open the pem file downloaded from Apple and copy the contents of the file.
?
Open the task “Update Apple Push Credentials” and paste the contents of the PEM file downloaded from Apple to the Section Apple Push Certificate PEM Content
?
Locate the PushCert.key you created when you stood up your Apple MDM Server the first time
Open this file in notepad and copy the contents
?
Paste the contents of the PushCert.key to the Apple Push Key section and type the contents of the Certificate
Take action to update the Apple Push Credentials and Target your MDM Server
?
?
BigFix Technical Advisor at HCL Software
1 个月Thanks for sharing this, Brad!