A device management (DM) server. The server comprises a memory, a processor, and an application programming interface (API), wherein the secondary DM server makes available a subset of the functionality of a DM server and when accessed through a portal, initiates a DM session with a short message service (SMS) system type message, notifies the mobile communication devices associated with a trusted third party of secondary DM server via the short message service system type message, and makes available firmware to be downloaded from a sandbox of the secondary DM server and tested by a limited number of the mobile communication devices associated with the third party, wherein the sandbox is an area in a memory to isolate untested firmware or firmware under test from the environment outside the sandbox.