Welcome
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
Remote Control On-demand Target Guide
Use Remote Control to start remote control sessions over the internet with targets that do not have the target software installed.
Starting a session with an on-demand target
You can start a remote control session through the internet with a target that does not have the target software already installed.
Starting a session with a macOS target
Learn how to start an On Demand Target session with a macOS target.

BigFix Documentation Homepage
BigFix 11 Lifecycle Documentation
Welcome to the BigFix Lifecycle documentation, where you can find information about how to install, maintain, and use BigFix Lifecycle.
BigFix Platform
BigFix Query
Lifecycle overview
BigFix Lifecycle is single-agent, single-console technology that provides near real-time visibility into the state of endpoints.
Lifecycle guides in PDF format
Following is a list of links to the BigFix Lifecycle guides in PDF format:
Software Distribution
Use the BigFix Software Distribution applications to deploy software to endpoints across your network from a single location. Maintain control and visibility into software delivery and installation. Device owners can use the Self Service Application to manage software and other BigFix actions that are deployed to them as offers.
OS Deployment
BigFix OS Deployment, which is part of the BigFix Lifecycle Management suite, provides a consolidated, comprehensive solution to quickly deploy new workstations and servers throughout a network from a single, centralized location. This solution saves time and money, enforces a standardized and approved image, and reduces risks associated with non-compliant or insecure configurations.
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
- Release notes
  A summary of changed or new features and enhancements included in BigFix Remote Control.
- Remote Control Installation Guide
  By using Remote Control you can remotely support and control thousands of PCs and servers, on an enterprise scale, from a central location or directly, in peer to peer mode.
- Remote Control Administrators Guide
  This guide is for users who want to administer Remote Control.
- Remote Control Console User Guide
- BigFix Remote Control Controller Users Guide
- Remote Control Target Users Guide
- Remote Control On-demand Target Guide
  Use Remote Control to start remote control sessions over the internet with targets that do not have the target software installed.
  - Configuring the landing page URL
    Remote Control provides a default web page that a target user can access to temporarily install the target software. The URL for the web page is http://trcserver/trc/ondemand/index.jsp. The variable trcserver is the host name or IP address of your Remote Control server. The default web page is provided when you have the Remote Control server installed. You can also configure server properties to provide a URL that the target user can access. The defined URL is displayed to the controller user when they start a broker remote control session.
  - Configuring custom fields
    You can add extra input fields to the default web page that is used during the process of downloading and temporarily installing the target software.
  - Creating a custom landing page
    You can customize the web page that is used to start the process to download and temporarily install the target software. The web page can be integrated into your own company website.
  - On-demand target portal access for internet users
    A reverse proxy, in a DMZ, can be configured to provide access for Internet users to the on-demand portal that is on the Remote Control server in the intranet. The reverse proxy must not allow access to other sections of the Remote Control server, but only to the on-demand portal.
  - Setting session permissions
    A target that participates in a broker session receives session policies from the server. These policies are resolved from the user and target group permission links that the user and target in the session are associated with. An on-demand target participates in broker remote control sessions. However, it is not registered with the server and does not belong to regular target groups. An unregistered target can also be a computer that you install the target software on, configure it with correct broker settings, and the target property Managed set to no. You can define session permissions for unregistered targets by using the Set Permissions for Unregistered Targets function.
  - Session policies for unregistered targets
    The set of session policies available for unregistered targets is divided into two sections. The core policies cater for remote support actions during a session. The extended policies cater for the session administration actions during a session. The core policies are always visible on the Set Permissions for Unregistered Targets screen. Click Show in the More permissions section to set values for the extended policies.
  - Defining the temporary recording directory for a broker
    You can define the directory where session recordings are temporarily stored on the broker, by configuring broker properties.
  - On-demand target installation methods
    The on-demand target installation method is determined by properties in the ondemand.properties files and the browser that is used by the target user .
  - Starting a session with an on-demand target
    You can start a remote control session through the internet with a target that does not have the target software already installed.
    - Starting a session with a macOS target
      Learn how to start an On Demand Target session with a macOS target.
  - Session limitations
    Some limitations might be in effect during a remote control session with an on-demand target.
  - Saving a session recording on the on-demand target
    As the user on an on-demand target you can save a recording of a remote control session on your computer. You can select to save the recording when you accept the session or start to record and save during the session.
  - Handing over a broker collaboration session
    If you are the master controller of a collaboration session, that involves a broker, you can pass full control of the session to another participant.
  - Ending a session
    When you end a session with an Remote Control on-demand target, all related files and directories are deleted.
  - Ending a collaboration session when you disconnect
    When you end a session in which collaboration is started, you can choose to stay in the session or disconnect from the session.
  - Saving the session log file
    You can save the trace log file that is created during a session with an Remote Control on-demand target.
  - Session history for unregistered targets
    After you participate in remote control sessions with on-demand targets, you can view the session history. Sessions that involved unregistered targets are listed in the All Session History report and My Session History report together with the registered target sessions. You can also view a list of the sessions that only involved unregistered targets.
  - Database table definitions
    Description and definition of the database tables that hold data for remote control sessions with on-demand targets. The SESSIONS_DATA table hold the data that is submitted from the default web page that is used by the target user. The SESSIONS table holds session data.
  - OnDemand properties file
    Edit the ondemand.properties file to create and configure properties for remote control sessions with on-demand targets.
  - Determine the installation method for the on-demand target
    The configuration of the on-demand installation method properties determines which installation method is used for the on-demand target.
  - Lite Web Portal
    Lite Web Portal enables you to start a Remote Control session with an On Demand Target without using a VPN, even when the controller and the target are over the Internet.
  - Troubleshooting
    When the on-demand target is installed, a log file is created in the target user's home directory. This file can be used for debugging purposes to examine any errors during the installation of the target or during a remote control session.
  - Frequently asked questions
- Remote Control V10 Readme
Power Management
Use Power Management to control, monitor, and manage conservation policies in your deployment.
Server Automation
Server Automation provides powerful automation. You can use it to sequence automation actions in steps across multiple endpoints.
Profile Management
Profile Management is a WebUI-based feature of BigFix Lifecycle. It provides Security Administrators the capability to define and deploy security policies to Windows 10 and macOS devices.
CVE Search dashboard
BigFix CVE Search dashboard and Web Report are available as part of the CyberFOCUS site.
BigFix Remediate
BigFix MCM

Starting a session with a macOS target

Learn how to start an On Demand Target session with a macOS target.

Before you begin

Ensure on the Remote Control Server, in the ondemand.properties file, the property ondemand.macos.package is set to .pkg. To check that:

In the Remote Control Server UI, clickAdmin > Edit the properties file.
From the drop-down menu, select ondemand.properties and check the value of the ondemand.macos.package property.

About this task

When you set the ondemand.macos.package to .pkg, you can start the session on the macOS target without manually changing the permissions on the downloaded file. After setting the property, to start a session on a macOS target, do the following steps:

Procedure

Start a broker session. For instructions, see Starting a session with a macOS target
Open the browser on the macOS target in which you want to start the session.
Open the connection URL displayed in the Controller and follow the instructions shown on that page. The .pkg file is downloaded automatically.
After the .pkg file gets downloaded successfully, double click the file to start it.
Follow the instructions shown in the installer to complete the installation.
Click Close to close the installer.
Note: If you do not have the administrator rights to select Change Install Location..., the error message You cannot install Remote Control On-demand Target in this location ... might appear. However, you can safely ignore this message, as this seems to be a bug in the macOS installer application).

Results

When the installation completes, the On-demand Target application starts and connects to the broker session automatically.
If you have selected Install for me Only during the installation, the On-demand Target application is installed in the folder /Library/Caches/RCODT or $HOME/Library/Caches/RCODT.
After successful installation, the .pkg file is deleted automatically.
When the Broker session is terminated, the application is deleted automatically; therefore, no track of the application is left after that the session is terminated.

Note: To work correctly, the On-demand Target needs the "Accessibility" and "Screen Recordings" permissions. For the instructions to set these permissions, see Enable the required macOS permission on Remote Control Target version V10 IF0001 or later.