Avoiding duplicates when a Client is restored

When the BigFix client is rolled back or restored from a snapshot, the next time it registers itself with the BigFix server, it receives a new Computer ID. The BigFix client with the old Computer ID becomes inactive because it does not report with the same Computer ID. As a result, the BigFix console shows duplicated entries for the same computer. Additionally, the affected computer loses all information: action history, discovery, and so on.

About this task

To avoid this situation, you must first back up some client data of the computer whose identity you want to preserve and then follow the procedure described below.

Client data backup

  1. Stop the BigFix client service.
  2. Store the following data.
    1. The registry key value for the ComputerID from the following location.
      • Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\BigFix\EnterpriseClient\GlobalOptions
      • Linux: /var/opt/BESClient/besclient.config under the section Software\BigFix\EnterpriseClient\GlobalOptions
      • MacOS: /Library/Preferences/com.bigfix.BESAgent.plist
    2. The BES Client\KeyStorage folder from the default installation directory of the BigFix client.
Procedure to keep the client identity
  1. The BigFix server can match the data that is stored aside to the BigFix client that is reinstalled or reverted from a snapshot when the ClientIdentityMatch parameter of the BigFix server is set to 100. By default, the parameter is set to 0. To change the value of the parameter, go to the computer on which the BigFix server is installed and perform the following steps:
    1. Windows: Go to Start > BigFix Administrative Tool > Advanced Options and set the value of the ClientIdentityMatch parameter to 100.
    2. Linux: Run the following command.
      ./BESAdmin.sh -setadvancedoptions -sitePvkLocation=/root/backup/license.pvk 
-sitePvkPassword=pippo000 -update clientIdentityMatch=100
  2. Ensure that you complete this action before you install the BigFix client on the computer whose identity you want to preserve.
  3. Install the BigFix client on the computer whose identity you want to preserve. After the installation of the BigFix client completes, the computer automatically registers with the BigFix server and receives a unique Computer ID.
  4. Stop the BigFix client.
  5. Move to the following location:
    • Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\BigFix\EnterpriseClient\GlobalOptions
    • Linux: /var/opt/BESClient/besclient.config under the section [Software\BigFix\EnterpriseClient\GlobalOptions]
    • MacOS: /Library/Preferences/com.bigfix.BESAgent.plist
    and remove the values for the following parameters:
    • RegCount
    • ComputerID
    • ReportSequenceNumber
  6. Delete the __BESData and KeyStorage folders from the installation directory of the BigFix client.
  7. Restore the previously stored ComputerID and KeyStorage.
  8. Start the BigFix client.