Welcome
BigFix UI Administration Guide
Read this guide for information about installing and administering the BigFix UI
Installation
This topic explains how to install the BigFixUI.exe file to initiate the BigFix UI Setup. It also outlines the steps to configure settings using the BigFix UI Configuration Manager tool.
Configure External Application Resources
Use this task to configure mutual TLS (mTLS) certificates and connection settings for the external application resources that integrate with BigFix UI: Digital Employee Experience (DEX), Insights for Vulnerability Remediation (IVR), and Workflow Builder (WFB).

BigFix Documentation Homepage
BigFix 11 Platform Documentation
Welcome to the BigFix Platform documentation, where you can find information about how to install, maintain, and use BigFix.
Detailed system requirements
The content of this page has moved to the HCL Support site. You will be redirected shortly. If the auto-redirect fails for some reason, use this link: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0104120.
Platform guides in PDF format
Following is a list of links to the BigFix Platform user guides in PDF format:
Common Criteria Certification
Getting Started
Use this section to become familiar with BigFix infrastructure and key concepts necessary to understand how it works.
HTTPS across BigFix applications
This topic describes how the SSL/HTTPS communication works in BigFix applications and links the tasks on how to configure it.
Installation Guide
Learn the system requirements, licensing and installation instructions, and how to configure and maintain BigFix.
Configuration Guide
Learn how to configure BigFix according to your needs.
Console Operator's Guide
Learn how to work with the BigFix Console.
Asset Discovery User's Guide
Learn how BigFix Asset Discovery works.
Web Reports Guide
Learn how the Web Reports feature extends the power of BigFix.
BigFix Explorer Guide
Learn how the BigFix Explorer feature extends the power of BigFix.
BigFix MCP Server Guide
Learn how the BigFix Platform MCP Server extends the capabilities of BigFix by allowing compatible AI clients to use BigFix functionalities through the Model Context Protocol (MCP).
WebUI User's Guide
Read this guide for an introduction to the WebUI tools, concepts, and terminology.
WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
BigFix UI User's Guide
Read this guide for an introduction to the BigFix UI tools, concepts, and terminology.
BigFix UI Administration Guide
Read this guide for information about installing and administering the BigFix UI
- Introduction
  The BigFix UI Administration Guide explains how to install, configure, start, upgrade, and uninstall the BigFix UI. Use this guide to set up a working BigFix UI environment and keep it current.
- System Requirements
  This topic provides details about the environment requirements for running and configuring the BigFix UI. It outlines the supported hardware and software platforms, and the methods available to initiate the setup.
- Installation
  This topic explains how to install the BigFixUI.exe file to initiate the BigFix UI Setup. It also outlines the steps to configure settings using the BigFix UI Configuration Manager tool.
  - Configure Administrative Credentials
    Create the application instance credential that you use to set up and configure the application. This credential is a local application identity that secures the configuration mode. Use it only for initial access to the BigFix UI and for configuration.
  - Configure Database Settings
    This task explains how to select a supported database type and provide the required connection details to configure the database in the BigFix UI Configuration Manager.
  - Configure HTTPS Certificates
    This task explains how to set up or update the HTTPS certificate and key required for secure communication in the BigFix UI Configuration Manager.
  - Configure Application Settings
    Use this step to define application-level settings such as communication protocol, web server port, CORS origins, and security mode for the BigFix UI.
  - Configure mTLS Certificate
    Use this step to configure mutual TLS (mTLS) certificates for secure internal and external communications.
  - Configure External Application Resources
    Use this task to configure mutual TLS (mTLS) certificates and connection settings for the external application resources that integrate with BigFix UI: Digital Employee Experience (DEX), Insights for Vulnerability Remediation (IVR), and Workflow Builder (WFB).
  - Configure BES Explorer
    Use this step to configure the BES Explorer instance for secure communication with the BigFix UI application.
  - Deploy Frontend
    The frontend deployment is the final step in the BigFix UI Configuration Manager setup process. In this step, the system unpacks and installs the frontend files required for the application’s user interface. Deploying the frontend ensures that all previously configured components; administrative credentials, database settings, and certificates are integrated and accessible through the application interface. Completing this step finalizes the setup and makes the BigFix UI ready for use.
- Getting into BigFix UI
  This section provides an overview of the initial setup and startup configurations required to access and use the BigFix UI after deployment. It includes details about configurable variables, port mappings, and the process to start the application.
- Upgrade
  This topic explains how to upgrade an existing BigFix UI installation to a newer version with the BFUI.exe --upgrade command.
- Uninstallation
  This topic explains how to uninstall the BigFix UI application with the BFUI.exe --reset command.
Glossary
This glossary provides terms and definitions for the BigFix software and products.

Configure External Application Resources

Use this task to configure mutual TLS (mTLS) certificates and connection settings for the external application resources that integrate with BigFix UI: Digital Employee Experience (DEX), Insights for Vulnerability Remediation (IVR), and Workflow Builder (WFB).

Before you begin

The initial BigFix UI setup (BFUI.exe --setup) completed successfully.
You have administrative privileges on the host system.
The BES UI service is stopped. BigFix UI must be the only running instance when you run BFUI.exe.
The required TLS/mTLS client certificates, private keys, and trusted CA certificates are available for each external resource.

About this task

The BFUI.exe setup command-line utility provides a dedicated flag for each external application resource. Run these flags independently of --setup, at any time after the initial setup completes. To list all supported flags, run BFUI.exe --help.

Important: Every BFUI.exe launch mode requires BigFix UI to be the only running instance. Stop the BES UI service before you run these commands. If BigFix UI detects that another instance is already running, it stops on its own.

Procedure

Navigate to the cmd\bfui folder that contains the BFUI.exe file.
Open a command prompt with elevated administrative permissions.

Run the command for the external application resource that you want to configure.

Resource	Command
Digital Employee Experience (DEX)	`BFUI.exe --configure-dex`
Insights for Vulnerability Remediation (IVR)	`BFUI.exe --configure-ivr`
Workflow Builder (WFB)	`BFUI.exe --configure-wfb`

Follow the interactive prompts to provide the required certificate paths, key files, and external service endpoint details.
Verify that the configuration completes successfully before you start or restart the BigFix UI service.

Results

BigFix UI uses the configured certificates to establish mTLS-secured communication with each external application resource.

What to do next

Note: Configure each external resource separately. Run these commands individually at any time after the initial setup completes.