Device Management Administration

The Device Management Administration page provides administrators with tools to monitor enrolled devices and configure device management settings for the organization.

From this section, administrators can:

• Monitor device status and activity from the Device Dashboard
• Configure Device Registration Limits
• Configure Compliance Settings
• Manage the Fixiam Service Account
• Configure MacOS MDM Enrollment
• Configure Apple Automated Device Enrollment (ADE)

Device Dashboard

The Device Dashboard provides an overview of the devices enrolled in your organization and their current status.

Device Overview

The dashboard displays the following device metrics:

• Total Devices Registered: The total number of devices enrolled in Fixiam.
• Suspicious Flagged Devices: The number of devices that have been flagged as suspicious.
• Online Devices: The number of devices currently online.
• Devices Online vs Offline: A breakdown of devices based on their current connection status.
• Compliant vs Non-Compliant Devices: A breakdown of devices based on their compliance status.

Device Activity Monitoring

The Device Activity Monitoring section provides visibility into device authentication and login activity.

Administrators can filter activity data by:

• Time Period
• Device Type
• Geography

General Settings

Administrators can configure organization-wide device management settings from:

Device Management > Device Settings > General Settings

The available settings include:

• Device Registration Limit
• Compliance Settings
• Fixiam Service Account
• MDM Enrollment
• ADE Configuration

Device Registration Limit

Device Registration Limit controls the maximum number of devices that can be registered by users and administrators.

Administrators can configure:

• Maximum Devices per User
• Maximum Devices for Admin

Use the sliders to set the required limits and select Save to apply the changes.

Example: If the maximum devices per user is set to 6, a user can register up to six devices.

Compliance Settings

Compliance Settings determine how frequently Fixiam checks device compliance and the compliance threshold for each supported operating system.

Compliance Frequency Check

Administrators can choose how frequently Fixiam performs compliance checks:

• Hourly
• Daily
• Weekly
• Monthly

Select the required frequency and save the configuration.

Operating System Compliance Percentage

Administrators can define the minimum compliance percentage for each supported operating system.

Currently, compliance thresholds can be configured for:

• Windows
• Mac OS

Use the sliders to set the required percentage for each operating system.

Fixiam Service Account

The Fixiam Service Account is a global fallback login account used when a device does not have an assigned user.

It allows administrators to access devices for recovery or maintenance.

Configure the Service Account

Administrators can configure the service account by:

1. Entering the account name.
2. Choosing how the password is managed.
3. Selecting Automatically Generate a Password to allow Fixiam to generate a secure password.
4. Selecting Create Password to define a password that meets the minimum password requirements.
5. Selecting Save to apply the configuration.

Important: The Fixiam Service Account is a fallback account. It is used when a device has no assigned user and should be treated as a privileged account.

MDM Enrollment

The MDM Enrollment section is used to configure Apple MDM for Mac devices.

Before Mac devices can be enrolled through MDM, the organization must establish trust between Apple and Fixiam using the required MDM credentials.

The configuration process includes:

1. Downloading the Fixiam CSR.
2. Signing in to the Apple Push Certificate Portal.
3. Providing the organization's Apple ID.
4. Completing the Apple certificate configuration.

For detailed Mac enrollment instructions, see the MacOS Device Enrollment guide.

Apple Automated Device Enrollment

The ADE Configuration section allows organizations to configure Apple's Automated Device Enrollment.

ADE allows supported Apple devices to be automatically enrolled in the organization's MDM when the devices are purchased and assigned to the organization.

Configure ADE

The setup process includes:

1. Select Download under Generate a Key to download the key required to establish a secure connection with Apple's Automated Device Enrollment web service.
2. Sign in to Apple Business Manager using your organization's Apple credentials.
3. Navigate to the appropriate settings in Apple Business Manager and select the server for which you want to renew or configure the token.
4. Download the Automated Device Enrollment server token from Apple Business Manager.
5. Return to Fixiam and upload the server token under Upload Automated Device Enrollment Token.
6. Select Complete Setup.
   

Important: Keep the downloaded ADE server token secure. It is used by Fixiam to establish the connection between your organization's MDM and Apple's Automated Device Enrollment service.

Saving Configuration Changes

After making changes to any configurable settings:

1. Review the values you have entered or selected.
2. Select Save to apply the changes.
3. Select Cancel if you want to discard the changes.

Configuration changes apply to the organization's device management settings.