Welcome
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
BigFix Compliance Analytics Setup Guide
Installing BigFix Compliance Analytics
Use this guide to deploy and configure the BigFix Compliance Analytics.
Configure HTTPS
HCL BigFix Compliance Analytics administrators can configure SSL and the TCP ports from the Management > Server Settings section of the web interface.

BigFix Documentation Homepage
BigFix 10 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
- BigFix Compliance Analytics Setup Guide
  - Introduction
    BigFix Compliance Analytics is a component of BigFix Compliance, that aggregates and reports on the compliance statuses of all endpoints against deployed policies that are continually collected, aggregated, and reported using a powerful Compliance Analytics engine, database and user interface.
  - Installing BigFix Compliance Analytics
    Use this guide to deploy and configure the BigFix Compliance Analytics.
    - Download BigFix Compliance Analytics
      You can download BigFix Compliance Analytics by completing the following steps:
    - Running the Installer
      Follow these steps to install BigFix Compliance Analytics.
    - Upgrading
      When upgrading from earlier versions of BigFix Compliance Analytics, the installer replaces the previously supplied server certificate and private key pair with a new self-signed certificate and key pair.
    - Migrating Keystores
      Follow these steps to migrate keystores in BigFix Compliance Analytics. A keystore is a database file that stores security certificates, such as authorization or public key certificates.
    - Performing initial set up and configuration
      To set up the database connection, perform the following steps:
    - Configure HTTPS
      HCL BigFix Compliance Analytics administrators can configure SSL and the TCP ports from the Management > Server Settings section of the web interface.
    - Configuring LDAP
      BigFix for BigFix Compliance Analytics supports authentication through the Lightweight Directory Access Protocol (LDAP) server.
    - Updating National Vulnerability Database Data Feeds
      Administrator updates the BigFix Compliance Analytics periodically to upload and sychronize the latest vulnerabilities.
    - Log files
      This section describes how to access log files and the options associated with BigFix Compliance Analytics.
  - Uninstalling
    To remove BigFix Compliance from your infrastructure, stop the application-specific actions and analyses that are running on the computers and uninstall the scanner. Remove the VM Manager tool. Subsequently, uninstall the BigFix Compliance server, and optionally eliminate the associated database as well.
  - Configuring report definitions using REST API
    Administrators can use REST API to create, update, and delete saved report view definitions across BFC instances.
  - Disaster recovery for BigFix Compliance Analytics
    Use the standard cold standby method of creating a backup and restoring the system in your disaster recovery plan for BigFix Compliance Analytics.
- BigFix Compliance Analytics User Guide
  BigFix Compliance Analytics is a component of BigFix Compliance, that includes technical controls and tools that are based on industry practices and standards for endpoint and server security configuration.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
BigFix and QRadar User Guide
QRadar® provides security intelligence for protecting assets and information from advanced threats. BigFix provides a dashboard that is integrated with QRadar®. This dashboard is called the Manage Vulnerable Computers dashboard and is located within the Endpoint Protection domain in BigFix. From this dashboard, you can view enriched vulnerability and risk data, from which you can quickly identify the computers that are most at risk. You can remediate the vulnerabilities that are detected by QRadar® and you can also quarantine or un-quarantine computers.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
BigFix and Carbon Black integration
The HCL BigFix and Carbon Black integration allows administrators to deploy a full endpoint security solution to detect, contain, investigate, and remediate security threats and attacks on endpoints across the enterprise. The following sections provide useful information and links to the resources available for the solution.
Middleware Application Patching
BigFix Remediate
BigFix MCM

Configure HTTPS

HCL BigFix Compliance Analytics administrators can configure SSL and the TCP ports from the Management > Server Settings section of the web interface.

When turning on SSL, you can provide a pre-existing private key and certificate or have the system automatically generate a certificate. If you change the port or SSL settings, you must restart the service for the changes to take effect.

If you generate a certificate, you must specify a certificate subject common name. The common name must correspond to the DNS name of the HCL Endpoint Manger Analytics server.

If you provide a pre-existing private key and certificate, they must be PEM-encoded. If your private key is protected with a password, you must enter it in the Private key password field.