Welcome
WebUI User's Guide
Read this guide for an introduction to the WebUI tools, concepts, and terminology.
Modern Client Management and BigFix Mobile
This section guides you through BigFix Modern Client Management (MCM) and BigFix Mobile to understand the MCM concepts, terminologies, features, and functionality. You can find detailed instructions for managing the complete lifecycle of your MDM managed endpoints here.
Install and manage MCM and BigFix Mobile components - On-premises only
MDM on-premises requires you to perform one-time MDM Server setup. You must have the required hardware and software set up prior to deploying MDM on-premises. Set up your environment through BigFix WebUI.
Update Credentials
You can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. If you initially created SSL certificates using the BESAdmin tool for MDM server installation, you can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. This functionality will be deprecated soon, as manual credential creation and management are no longer required starting with the MCM 3.3 release.

BigFix Documentation Homepage
BigFix 11 Platform Documentation
Welcome to the BigFix Platform documentation, where you can find information about how to install, maintain, and use BigFix.
Detailed system requirements
The content of this page has moved to the HCL Support site. You will be redirected shortly. If the auto-redirect fails for some reason, use this link: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0104120.
Platform guides in PDF format
Following is a list of links to the BigFix Platform user guides in PDF format:
Common Criteria Certification
BigFix 10.0.1.41 complies with the requirements of the standard ISO/IEC 15408 (Common Criteria) v. 3.1 for the assurance level: EAL2
Getting Started
Use this section to become familiar with BigFix infrastructure and key concepts necessary to understand how it works.
HTTPS across BigFix applications
This topic describes how the SSL/HTTPS communication works in BigFix applications and links the tasks on how to configure it.
Installation Guide
Learn the system requirements, licensing and installation instructions, and how to configure and maintain BigFix.
Configuration Guide
Learn how to configure BigFix according to your needs.
Console Operator's Guide
Learn how to work with the BigFix Console.
Asset Discovery User's Guide
Learn how BigFix Asset Discovery works.
Web Reports Guide
Learn how the Web Reports feature extends the power of BigFix.
BigFix Explorer Guide
Learn how the BigFix Explorer feature extends the power of BigFix.
WebUI User's Guide
Read this guide for an introduction to the WebUI tools, concepts, and terminology.
- Welcome
  Welcome to BigFix WebUI. The WebUI delivers a powerful set of functions for BigFix operators. It simplifies BigFix workflows, speeds access to data, and improves flexibility, visibility, and performance.
- Meet the WebUI
  Take a quick tour of the WebUI screens, controls, and workflow.
- Get Started with Devices
  Use the Device screens to view and manage all the devices in your environment as determined by your permission levels. You can find specific devices, access device documents, select devices for deployment, generate and export device reports and do much more.
- Get Started with Patch
  Use the Patch screens to list patches, find specific patches, and view detailed patch information including known issues, vulnerable devices, and deployments.
- Get Started with Patch Policy
  A patch policy is a set of criteria that defines a patch list; that is, a collection of Fixlets that meet the patching criteria of a specific set of endpoints.
- Get started with IVR
  Use the Insights for Vulnerability Remediation (IVR) application to view a list of all the vulnerabilities, remediate vulnerabilities and create customized IVR reports.
- Get Started with Software
  A BigFix software package is the collection of Fixlets used to install software on a device. The package includes the installation files, the Fixlets that install them, and information about the package itself.
- Get Started with Custom Content
  Use the Custom Content pages to view custom content, edit tasks, and view related information, including applicable devices and deployments.
- Get Started with BigFix Query
  Use the BigFix Query feature to retrieve data from endpoints through a dedicated query channel, where the memory available on each Relay minimizes the impact to normal BigFix processing.
- Take Action: The Deploy Sequence
  To deploy means to dispatch content such as applications, modules, updates, and patches to one or more endpoints. For example, by deploying a software, you install the software in the targeted endpoints. BigFix WebUI enables you to configure the content and the target devises to create a deployment and monitor the deployment status. The work flow including all the steps, processes, and activities that are required to create a deployment is collectively called as the Deploy Sequence.
- Get Started with Deployments
  Use the Deployment views to monitor and verify completion of BigFix deployments.
- Get Started with the Content App
  Use the Content App to work with Fixlets, tasks, and baselines on the BigFix sites. Search, filter, and deploy content using standard WebUI tools.
- Get Started with Extensions Management Application
  BigFix Extension Management application provides you the possibility to extend WebUI features beyond what is delivered in the products that you are currently entitled to. You can address specific use cases that are not currently fulfilled by the product by adding ad-hoc extensions to WebUI.
- Modern Client Management and BigFix Mobile
  This section guides you through BigFix Modern Client Management (MCM) and BigFix Mobile to understand the MCM concepts, terminologies, features, and functionality. You can find detailed instructions for managing the complete lifecycle of your MDM managed endpoints here.
  - Modern Client Management dashboard
    The MCM dashboard is the home page of the MCM application. It provides insights into every aspect of device management, device security, and device encryption of MDM managed devices.
  - MCM roles and permissions
    Use the WebUI Permissions service to take advantage of fine-grained control over permissions and preferences for users and groups of users in WebUI MDM.
  - Device inventory
    After the devices are enrolled to MDM successfully, the devices report to BigFix WebUI, and they are listed on the Devices page. You can use the Devices page in BigFix WebUI to view the list of all devices (as determined by permission levels). The devices list shows all the devices in the BigFix environment including the devices managed by MCM.
  - Health Check
    As a Master Operator, use the Health Checks page in the MCM application to monitor the health of your MCM deployments.
  - Select target devices
    You can easily filter and select a specific group of target devices that meet your conditions for carrying out MCM commands using the WebUI. These commands include tasks such as installing and updating components; deploying actions, policies, policy groups, and more.
  - Install and manage MCM and BigFix Mobile components - On-premises only
    MDM on-premises requires you to perform one-time MDM Server setup. You must have the required hardware and software set up prior to deploying MDM on-premises. Set up your environment through BigFix WebUI.
    - Install BigFix MDM Service for Windows
      Learn how to install BigFix MDM Service for Windows to provide MDM service on Windows through WebUI.
    - Install BigFix MDM Service for Apple
      Learn how to install BigFix MDM Service for Apple through WebUI.
    - Install BigFix MDM Service for Android
      Learn how to install BigFix MDM Service for Android through WebUI.
    - Manage MDM server capability
      Read this topic to learn how to install additional MDM services such as Windows, Apple, Android and to configure the identity service.
    - Install MDM Plugin for Windows
      To deploy any of the supported MDM Plugins (Windows, Apple, and/or Android) on a Plugin Portal (Windows or Linux), complete the following steps.
    - Install MDM Plugin for Apple
      Learn how to deploy MDM Plugin on a Windows or Linux Plugin Portal to manage Apple devices.
    - Install MDM Plugin for Android
      Learn how to deploy any of the supported MDM Plugins on an Android Plugin Portal.
    - Update MDM Components
      Learn how to update MDM components.
    - Uninstall MDM components
      Learn how to uninstall MDM components.
    - Add Credentials
      After the initial MDM server installation, at any point in time, if you want to add credentials for additional servers, you can do that from WebUI Add Credentials page.If you initially created SSL certificates using the BESAdmin tool for MDM server installation, you can add credentials for additional servers at any time from the WebUI Add Credentials page. This functionality will be deprecated soon, as manual credential creation and management are no longer required starting with the MCM 3.3 release.
    - Update Credentials
      You can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. If you initially created SSL certificates using the BESAdmin tool for MDM server installation, you can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. This functionality will be deprecated soon, as manual credential creation and management are no longer required starting with the MCM 3.3 release.
    - Remove Credentials
      You can remove the server and client credentials that you have uploaded previously from WebUI Remove Credentials page. If you initially created SSL certificates using the BESAdmin tool for MDM server installation, you can remove the server and client credentials that you have uploaded previously from WebUI Remove Credentials page. This functionality will be deprecated soon, as manual credential creation and management are no longer required starting with the MCM 3.3 release.
  - Install and manage ODJ service
    Offline Domain Join (ODJ) service is an "Add-on" service and is installed through WebUI after completing the initial MDM server installation.
  - Configuring BigFix MCM and BigFix Mobile
    After the MCM components are set up, there are additional configuration options available to enable features like Bulk Enrollment for Windows, DEP policies for macOS, or prestage installers for Windows and MacOS MDM endpoints.
  - Smart Groups
    Smart groups are dynamic user groups created and managed based on Active Directory group, user attributes, and device attributes. The members of a smart group are defined dynamically in WebUI, rather than being manually defined by an administrator. You can target multiple devices using smart groups that a user or a device is subscribed to and you can manage apps, device access, group membership and so on.
  - Enroll devices
    You must enroll your devices to BigFix MCM to get them listed in WebUI and manage them through MDM.
  - Manage applications
    You can configure the MCM server to install the BigFix agent and other applications on , Windows, macOS, Android, and Apple mobile devices during enrollment or after the devices have been enrolled with MCM.
  - Manage devices
    After the devices are enrolled to MDM successfully, the devices report to BigFix WebUI, and they are listed on the Devices page. Use the MCM application in the WebUI to view, manage, and control these MCM and BigFix Mobile devices.
  - Manage policies
    You can create and manage policies specific to Windows, Apple (macOS/iOS/iPadOS), and Android devices through BigFix WebUI.
  - Deploy MCM actions
    With MCM and BigFix Mobile, you can perform the following MDM-specific actions:
  - Unenroll devices
    After unenrolling from MDM, you can no longer manage the device through BigFix MCM. MDM policies become ineffective on the unenrolled devices.
- Extending BigFix management capabilities
  BigFix 11 delivers a few significant new functions for enhancing the visibility and management of devices on your network regardless of whether the devices are physical or virtual.
- Support
  For more information about this product, see the following resources:
WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
Glossary
This glossary provides terms and definitions for the Modern Client Management for BigFix software and products.

Update Credentials

You can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. If you initially created SSL certificates using the BESAdmin tool for MDM server installation, you can replace the server and client credentials that you have uploaded at the time of initial MDM server installation and those added later through the "Update credentials" page. This functionality will be deprecated soon, as manual credential creation and management are no longer required starting with the MCM 3.3 release.

About this task

To update server and client credentials, complete the following steps.

Note: Uploading credentials overwrites the previously uploaded credentials.

Procedure

From MCM Admin page, expand MDM Plugins and click Update Credentials.
The Upload Credentials drop-down lists the MDM servers in your environment. Select an MDM server for which you want to upload the credentials. For example, mdmserver.deploy.bigfix.com.
Click Add File next to a certificate or key that you want to upload, navigate to the folder, and select the respective file.

Note: Upload the appropriate certificate and key files. If the files that you uploaded do not match, an error message is displayed.
Click Save.

Results

The previously uploaded credentials are replaced in the credential store with the ones that you have uploaded now.

Note: Uploading to the credential store does not automatically redeploy these credentials to the various servers.