Welcome
OS Deployment
BigFix OS Deployment, which is part of the BigFix Lifecycle Management suite, provides a consolidated, comprehensive solution to quickly deploy new workstations and servers throughout a network from a single, centralized location. This solution saves time and money, enforces a standardized and approved image, and reduces risks associated with non-compliant or insecure configurations.
Configuring the OS Deployment Environment
To start working with OS Deployment, run the configuration Fixlets and tasks listed in the Setup Node.
Configuring the DHCP server
To connect targets to the OS Deployment server, you might need to configure the DHCP server based on the characteristics of your network.
Setting DHCP Option 66 and 67

BigFix Documentation Homepage
BigFix 11 Lifecycle Documentation
Welcome to the BigFix Lifecycle documentation, where you can find information about how to install, maintain, and use BigFix Lifecycle.
BigFix Platform
BigFix Query
Lifecycle overview
BigFix Lifecycle is single-agent, single-console technology that provides near real-time visibility into the state of endpoints.
Lifecycle guides in PDF format
Following is a list of links to the BigFix Lifecycle guides in PDF format:
Software Distribution
Use the BigFix Software Distribution applications to deploy software to endpoints across your network from a single location. Maintain control and visibility into software delivery and installation. Device owners can use the Self Service Application to manage software and other BigFix actions that are deployed to them as offers.
OS Deployment
BigFix OS Deployment, which is part of the BigFix Lifecycle Management suite, provides a consolidated, comprehensive solution to quickly deploy new workstations and servers throughout a network from a single, centralized location. This solution saves time and money, enforces a standardized and approved image, and reduces risks associated with non-compliant or insecure configurations.
- Product overview
- Configuring the OS Deployment Environment
  To start working with OS Deployment, run the configuration Fixlets and tasks listed in the Setup Node.
  - Update Server Whitelist for OS Deployment
  - Managing the Linux Image provider
    The Linux Image provider component is needed for reimaging Linux systems in your environment and it can be installed on Windows computers only.
  - Managing Bare Metal OS Deployment Servers
    The Bare Metal Server Manager dashboard manages the installation, upgrade, and uninstallation of Bare Metal OS Deployment servers.
  - Ports used by the Bare Metal OS Deployment Server
    To ensure correct communication, check the ports used for the different deployment scenarios.
  - Configuring the DHCP server
    To connect targets to the OS Deployment server, you might need to configure the DHCP server based on the characteristics of your network.
    - Setting DHCP Option 43
      Option 43 (Class identifier) allows you to inform the target that the location of the PXE server is known.
    - Setting DHCP Option 60
    - Setting DHCP Option 66 and 67
  - Deploying the Management Extender for Bare Metal Targets
    You can manage Bare Metal Targets from the BigFix infrastructure by installing and using the Management Extender for Bare Metal targets.
  - Activating Analyses
  - Health Checks Dashboard
  - Verifying Secure Hash Algorithm (SHA-256) readiness
    BigFix version 9.1 uses the SHA-256 hashing algorithm to increase file exchange security. OS Deployment manages file exchange within the application flows using SHA-256.
- Managing MDT Bundles and Deployment Media for Windows targets
  To perform OS Deployment of Windows operating systems, you prepare your deployment environment and resources using the Bundle and Media Manager Dashboard.
- Managing Drivers for Windows Deployments
  The Manage Images and Drivers node includes tasks to prepare and import drivers for deployment to Windows targets.
- Managing Linux OS Resources and Deployment Media
  You can import Linux OS Resources needed to create network boot media and to capture and deploy Linux images
- Managing Images
  The Manage Images and Drivers node includes tasks to capture, import and manage images for deployment to targets.
- Upload Mode
  By default, the OS images are permanently stored in the BigFix root server.
- Reimaging
  Reimaging is the process of saving the user state on a computer, installing a new image on it, and then restoring the user state.
- Installing Windows 10/11 or Windows Server using in-place upgrade
  To upgrade your existing Windows systems to Windows 10/11 or Windows Server you can use the in-place upgrade fixlets.
- Bare Metal deployments
  You can install and manage BigFix for OS Deployment servers and create profiles for bare metal deployments.
- Monitoring Deployment Activities
  You can track and monitor all deployment activities in your Endpoint Management network.
- Maintenance and troubleshooting
  You can monitor deployment activities, correct exceptions and adjust configuration settings specific to your environment through dashboards and tasks available for these purposes.
- Setting up OS Deployment in an air-gapped network
  You can choose to configure your OS Deployment and Bare Metal Imaging site in an air-gapped network.
- Deprecated and Superseded functionalities
  This topic lists the functionalities that are still present in OSD, but are deprecated.
- Create Ubuntu OS Resources manually
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
Power Management
Use Power Management to control, monitor, and manage conservation policies in your deployment.
Server Automation
Server Automation provides powerful automation. You can use it to sequence automation actions in steps across multiple endpoints.
Profile Management
Profile Management is a WebUI-based feature of BigFix Lifecycle. It provides Security Administrators the capability to define and deploy security policies to Windows 10 and macOS devices.
CVE Search dashboard
BigFix CVE Search dashboard and Web Report are available as part of the CyberFOCUS site.
BigFix Remediate
BigFix MCM

Setting DHCP Option 66 and 67

You must set option 66, Boot Server Host Name, and 67, Boot File Name, for each specific UEFI target that cannot process option 43.

Adding DHCP option 66 and 67 to Windows DHCP server

To set options 66 and 67 it is necessary to reserve an IP address for the target. Select a free IP address from the range assigned by your DHCP server. This address is referenced in the following procedure as the target IP address. Keep a record of the MAC address of the target machine network card. It is referenced in the following procedure as the target MAC address.

Follow these steps to add option 66 and 67 on Windows:

Open a command window (select Start > Run > cmd)
Type netsh
Type dhcp
Type server \\<servername> or server <server_ip_address>
You see a command prompt that says: <dhcp server>
Type scope <scopename>
You see a command prompt that says: <dhcp server scope>
Type add reservedip <target_ip_address> <target_mac_address>
Type set reservedoptionvalue <target_ip_address> 66 STRING <boot_server_ip_address>
Type set reservedoptionvalue <target_ip_address> 67 STRING Rembo-x64UEFI
To confirm that everything was set correctly, type show reservedoptionvalue <target_ip_address>

Adding DHCP option 66 and 67 to a host with ISC DHCP server

If you are using the ISC DHCP server, you can add the DHCP option 66 and 67 to a group of UEFI targets or to a single UEFI target by adding, respectively, the statement options tftp-server-name <server_ip_address> and option bootfile-name "Rembo-x64UEFI" to a section of the configuration file.