System requirements

BigFix supports security and non-security updates for Microsoft and third-party operating systems and applications.

Types of supported updates

BigFix supports the following types of Windows updates.

Security update
Refers to security-related vulnerabilities.
Cumulative update
Refers to updates that contain all the previously released updates up to that update release. If you have installed previous updates, only the new fixes that are contained in this package will be downloaded and installed to your computer.
Non-security update
Refers to all other updates that are not included in the security updates type. There are several types of non-security updates. For more information, see http://support.microsoft.com/.
BigFix supports the following non-security updates:
Critical update
Refers to widely released fixes to address bugs that are critical but not related to security.
Service pack
Refers to cumulative set of security, critical, and general updates. Service packs might also contain hot fixes or additional fixes that were found internally since the last release. In some cases, service packs also contain design or feature changes that were requested by customers.
Update
Refers to widely released fixes to address bugs that are not critical or not related to security.
Note: BigFix generally provides support for updates that are found in the Microsoft Update Catalog. In some instances, the updates require users to directly download the links. For more information, see https://catalog.update.microsoft.com/v7/site/home.aspx. This link requires the use of Internet Explorer.
Update rollup
Refers to updates that target a specific area, for example security or a product component. Update rollup is a cumulative set of hot fixes, security updates, critical updates, and updates that are packaged for easy deployment.
Note: BigFix generally provides support for updates that are found in the Microsoft Update Catalog. In some instances, the updates require users to directly download the links. For more information, see https://catalog.update.microsoft.com/v7/site/home.aspx. This link requires the use of Internet Explorer.

To learn more about the standard terminology that Microsoft uses, see http://support.microsoft.com/en-us/kb/824684.

BigFix tries to stay close to the terms that the vendors use, such as the Microsoft patch category terminology. In some instances, Microsoft and BigFix use different category terms. For more information, see https://bigfix-wiki.hcltechsw.com/wikis/home?lang=en-us#!/wiki/BigFix%20Wiki/page/Difference%20in%20category%20terms%20used%20by%20Microsoft%20and%20BigFix.

Supported operating systems and applications

BigFix provides security and non-security updates for operating systems and applications in the Patch Management for Windows site. Non-security updates include critical updates, service packs, and general updates.

BigFix supports the final release versions of the listed Microsoft products. Microsoft versions other than the final commercial release version, such as alpha, beta, preview, community technology previews (CTP), technical previews, and insider programs, are not supported by BigFix.

The following table lists the supported operating systems, applications, and their corresponding updates types.
Table 1. Developer Tools, Runtimes, and Redistributables
Developer Tools, Runtimes, and Redistributables
Visual Studio 2015
Visual Studio 2017
Visual Studio 2019
Visual Studio 2022
Table 2. Exchange
Exchange
Exchange Server 2016
Exchange Server 2019
Table 3. Microsoft SharePoint
Microsoft SharePoint
SharePoint Server 2019
SharePoint Server 2016
SharePoint Server Subscription Edition
Table 4. SQL Server
SQL Server
Microsoft SQL Server 2022
Microsoft SQL Server 2019
Microsoft SQL Server 2017
Microsoft SQL Server 2016 SP3
Table 5. Windows Security
Windows Security
Windows Security antimalware platform
Microsoft Defender Antivirus
Microsoft Defender for Endpoint
Table 6. Windows
Windows
Windows Server 2016
Windows 10 21H2 LTSC
Windows 10 22H2
Windows 10 1507 LTSB
Windows 10 1607 LTSB
Windows 10 1809 LTSC
Windows 11 22H2 / ARM
Windows 11 23H2 / ARM
Windows 11 24H2 / ARM
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2019
Windows Server 2022
Windows Server 2025 / 24H2
Note: For a complete list of operating systems and applications that have Security updates support, see the following wiki topic: Supported OS.
Note: Microsoft no longer supports and releases updates products that have reached their of life (EOL). Although, BigFix no longer provides new content for products that reached its end support date, you can use standard support channels to raise concerns and for troubleshooting support for existing content. For a list of end of life products, see the Products that have reached their end of support date section.

Supported operating systems for Safe OS Dynamic Updates

The following table lists the supported operating systems for Safe OS Dynamic Updates.
Table 7. Supported operating systems for Safe OS Dynamic Updates
Supported OS for Safe OS Dynamic Updates
Windows 10 1507 LTSB
Windows 10 1607 LTSB
Windows 10 1809 LTSC
Windows 10 22H2
Windows 11 22H2 / ARM
Windows 11 23H2 / ARM
Windows 11 24H2 / ARM
Windows Server 2019
Windows Server 2022
Windows Server 2025 / 24H2
Note:

We only support the Safe OS Dynamic Update phase.

We do not support the Setup Dynamic Update phase.

The Setup Dynamic Update phase is usually used in the following cases:

  • When performing in-place upgrades, such as upgrading from Windows 10 to Windows 11.

  • When doing fresh installations using media such as ISO files, if this option is enabled.

To ensure consistent deployment scenarios, our support is limited to the Safe OS Dynamic Update phase.

Support information for Windows 10

BigFix Patches for Windows supports Windows 10 Business edition ISO for the following editions:
  • Windows 10 Pro
  • Windows 10 Pro N
  • Windows 10 Pro for Workstations
  • Windows 10 Pro N for Workstations
  • Windows 10 Pro Education
  • Windows 10 Pro Education N
  • Windows 10 Education
  • Windows 10 Education N
  • Windows 10 Enterprise
  • Windows 10 Enterprise N
  • Windows 10 IoT Enterprise
  • x86 and x64 architectures are supported.
Note: Bigfix Patches for Windows does not support consumer edition ISO.

Support information for Windows 11

BigFix Patches for Windows supports Windows 11 Business edition ISO for the following editions:
  • Windows 11 Pro
  • Windows 11 Pro N
  • Windows 11 Pro for Workstations
  • Windows 11 Pro N for Workstations
  • Windows 11 Pro Education
  • Windows 11 Pro Education N
  • Windows 11 Education
  • Windows 11 Education N
  • Windows 11 Enterprise
  • Windows 11 Enterprise N
Note: Bigfix Patches for Windows does not support consumer edition ISO.

Supported Click-to-Run products

BigFix supports Microsoft products that use the Click-to-Run technology.

Table 8. Supported Office 365 - Office 2016 PC applications and channels
Office 365 subscription Supported products Supported update channels for clients
  • Microsoft Office 365
  • Office 2016
  • Office 2019
  • Office 2021
  • Office 2024
  • Office 2019 Volume Licensed
  • Office LTSC 2021 Volume Licensed
  • Office LTSC 2024 Volume Licensed
  • Access
  • Excel
  • OneNote
  • Outlook
  • PowerPoint
  • Publisher
  • Skype for Business
  • Word
  • Current Channel
  • Monthly Enterprise Channel
  • Semi-Annual Enterprise Channel (Preview)
  • Semi-Annual Enterprise Channel
  • Volume/perpetual License

Supported .NET Framework versions

Table 9. Supported .NET Framework versions
.NET Framework versions
Update for .NET Framework 3.5
Update for .NET Framework 4.7.2
Update for .NET Framework 4.8
Update for .NET Framework 4.8.1

Supported third party applications

Third party applications are found in the Updates for Windows Applications site. Some applications are supported with audit Fixlets. Audit Fixlets will only indicate that the application is outdated. Users must manually apply the update.

Use the Fixlet Maker dashboard to create the necessary Fixlets to patch the applications. For more information, see the following topics:
Table 10. Applications that are supported in the Updates for Windows Applications site
Application Version
Adobe Reader 2025.001.20474 and later
Apple iTunes 12.13.7 and later
Oracle Java™ Runtime Environment 8u451 and later
Google Chrome 136.0.7103.114 and later
Mozilla Firefox 138.0.4 and later
Mozilla Firefox ESR 115.23.1, 128.10.1, and later
Mozilla Thunderbird 138.0.1 and later
Mozilla Thunderbird ESR 128.10.1 and later
Notepad++ 8.8.1 and later
Zoom 6.4.10.64378 and later
Webex 45.2.2.20 and later
GoToMeeting 10.19.0.19950 and later
Microsoft Edge 136.0.3240.76 and later
ASP.NET Core Runtime 8.0.16, 9.0.5, and later
.NET Desktop Runtime 8.0.16, 9.0.5, and later
.NET Runtime 8.0.16, 9.0.5, and later
.NET SDK 8.0.116, 9.0.106, and later
Azure Connected Machine Agent 1.52 and later
Table 11. Adobe Document Cloud
Adobe Product Track Version
Adobe Acrobat Classic 2020.005.30763 and later
Continuous 2025.001.20474 and later
Adobe Acrobat Reader Classic, Continuous 2020.005.30763 and later
Continuous 2025.001.20474 and later
Note:
  • HCL BigFix does not support beta versions of these listed applications.
  • BigFix provides Fixlets that are categorized as "Upgrade" to accommodate upgrades to newer major versions of Oracle Java™ Runtime Environment.
  • BigFix provides support for 86-bit of windows applications compatible with x64 machines.
  • BigFix does not support the use of 32-bit and 64-bit versions of Oracle Java™ Runtime Environment in the same machine.
  • Currently, BigFix supports only the MSI version of zoom, Google Chrome, GoToMeeting, Microsoft Edge, and Webex Apps which are the IT admin installer. BigFix does not support .exe based installation of zoom, Google Chrome, GoToMeeting, Microsoft Edge, and Webex Apps.
  • The versions mentioned are in order of initial version to latest version supported.
  • Only the current version is available for deployment and all the earlier versions are superseded.
  • Other than the mentioned versions, no future updates are supported currently for Adobe Shockwave Player, Apple QuickTime Player, Winamp, ImgBurn, WinZip, and Real Player.
  • To check if any update released is supported or not, look for term *-WS-WAS-* in the update name. If the term contains *-WS-WASJAVASDK-* or *-WS-WAS*-* then those updates are not supported. The examples are as follows:
    • 9.x - Not supported
    • 8.5.5.9-WS-WAS-IFPI73197 - Supported
    • 8.0.0.0-WS-WASJavaSDK8-OS390-IFPI93093 - Not Supported
    • 8.5.5.11-WS-WASBundledSDK8-OS390-IFPI93094 - Not Supported
    • 8.0.0.0-WS-WASJavaSDK8-WinX64-IFPI93093 - Not Supported
    • 8.0.0.0-WS-WASJavaSDK8-WinX32-IFPI93093 - Not Supported
    • 8.5.5.11-WS-WASBundledSDK8-WinX32-IFPI93094 - Not Supported
    • 8.0.0.0-WS-WASJavaSDK8-WinX32-IFPI93093 - Not Supported

For supported languages, see Other languages supported

Products that have reached their end of support date

Microsoft products have a lifecycle that ends when the product is no longer supported. When a product reaches end of life (EOL) or its end of support date, Microsoft no longer supports and releases updates for the product, including automatic fixes, updates, and online technical assistance.

BigFix, in turn, no longer provides security and non-security content and support for products that reached its end of support date. However, users of existing Windows content can use the standard HCL support channels to raise concerns and for troubleshooting support.

Microsoft provides extended support for some products that have reached their end of life. If you signed for extended support with Microsoft, it is suggested that you contact your HCL account representative. To see information about product offerings, see https://support.hcl-software.com/csm.