Welcome
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
BigFix Compliance Analytics Setup Guide
Installing BigFix Compliance Analytics
Follow this comprehensive guide to successfully deploy and configure the BigFix Compliance for optimal performance and data insights.
Running the Installer
Follow these steps to install BigFix Compliance Analytics.

BigFix Documentation Homepage
BigFix 10 Compliance Documentation
Welcome to the BigFix Compliance documentation, where you can find information about how to install, maintain, and use BigFix Compliance.
BigFix Platform
BigFix Query
Compliance Overview
BigFix Compliance helps support endpoint security throughout your organization.
Compliance Guides in PDF format
Following is a list of links to the BigFix Compliance user guides in PDF format:
SCM Checklists Guide
This SCM Checklists page provides information about the compliance checklists supported by BigFix Compliance, including frameworks, supported platforms, and checklist versions.
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
- BigFix Compliance Analytics Setup Guide
  - Introduction
    BigFix Compliance Analytics is a component of BigFix Compliance, that aggregates and reports on the compliance statuses of all endpoints against deployed policies that are continually collected, aggregated, and reported using a powerful Compliance Analytics engine, database and user interface.
  - Installing BigFix Compliance Analytics
    Follow this comprehensive guide to successfully deploy and configure the BigFix Compliance for optimal performance and data insights.
    - Download BigFix Compliance Analytics
      You can download BigFix Compliance Analytics by completing the following steps:
    - Running the Installer
      Follow these steps to install BigFix Compliance Analytics.
    - Upgrading
      When upgrading from earlier versions of BigFix Compliance Analytics, the installer replaces the previously supplied server certificate and private key pair with a new self-signed certificate and key pair.
    - Migrating Keystores
      Follow these steps to migrate keystores in BigFix Compliance Analytics. A keystore is a database file that stores security certificates, such as authorization or public key certificates.
    - Performing initial set up and configuration
      To set up the database connection, perform the following steps:
    - Configure HTTPS
      HCL BigFix Compliance Analytics administrators can configure SSL and the TCP ports from the Management > Server Settings section of the web interface.
    - Configuring LDAP
      BigFix for BigFix Compliance Analytics supports authentication through the Lightweight Directory Access Protocol (LDAP) server.
    - Updating National Vulnerability Database Data Feeds
      Administrator updates the BigFix Compliance Analytics periodically to upload and sychronize the latest vulnerabilities.
    - Log files
      This section describes how to access log files and the options associated with BigFix Compliance Analytics.
  - Uninstalling
    To remove BigFix Compliance from your infrastructure, stop the application-specific actions and analyses that are running on the computers and uninstall the scanner. Remove the VM Manager tool. Subsequently, uninstall the BigFix Compliance server, and optionally eliminate the associated database as well.
  - Configuring report definitions using REST API
    Administrators can use REST API to create, update, and delete saved report view definitions across BFC instances.
  - Disaster recovery for BigFix Compliance Analytics
    Use the standard cold standby method of creating a backup and restoring the system in your disaster recovery plan for BigFix Compliance Analytics.
- BigFix Compliance Analytics User Guide
  BigFix Compliance Analytics is a component of BigFix Compliance, that includes technical controls and tools that are based on industry practices and standards for endpoint and server security configuration.
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Client Manager for Endpoint Protection
BigFix Compliance CMEP is an effective tool to monitor the deployment and health status of various Endpoint Protection products and provide quick remediation actions to recover needed endpoint protection.
BigFix Client Compliance
This guide describes the BigFix Client Compliance and its solutions (BigFix Client Compliance Configuration and BigFix Client Compliance Windows (IPSec Framework)) which helps in maintaining the compliance status of the computers.
Middleware Application Patching
Middleware patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
Technical References
Find technical reference material for BigFix® Compliance components. The topics in this section cover release notes, tool specifications, and version details for Compliance components, including Security Configuration Automation Protocol (SCAP), Security Compliance Analytics (SCA), and related tools.
BigFix Remediate
BigFix MCM
Glossary
This glossary provides terms and definitions for the BigFix® Compliance software and products.

Running the Installer

Follow these steps to install BigFix Compliance Analytics.

Procedure

Run the installer executable file as administrator. When you are prompted, extract the installer file to a folder. If you cannot run the installer from the folder, copy the installer outside the folder and run the file.
Run bfc-server.exe from within the folder to begin the installation.
You can change the installation path and port during installation.
1. Installation path
2. TCP port
Note: BigFix Compliance Analytics uses HTTPS by default.
Specify the user account that runs the BigFix Compliance Analytics service. If you configure HCL BigFix Analytics to connect to the SQL Server through a user that is authenticated through Windows, the HCL BigFix Analytics service must be configured to run as that same user.

Figure 1. Choose user account
When the installation is completed, use the web interface to complete the setup of the HCL BigFix Analytics server.
The final window of the installer prompts you to launch a web browser to complete the setup. Click Done.

Figure 2. Setup

The BigFix Compliance Analytics web server may take a while to fully load. Allow time for the server to initialize.
While the server is loading or during the database configuration, you might receive a message stating Not Found. This is expected. The page automatically reloads when it is ready.