Home
WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
WebUI Installation
Use these procedures to install or upgrade the WebUI on BigFix Platform version 10 or later. Before you start the procedure:
Configure SSL certificates
Secure Sockets Layer (SSL) certificates enable secure communication between the BigFix WebUI server and all users that access it. Use this procedure to configure SSL certificates for BigFix WebUI.
Revoke WebUI Certificates
You must revoke your certificates if they have been compromised or if they are no longer valid for the intended purpose.

WebUI Administration Guide
Read this guide for information about installing and administering the WebUI.
- Introduction
  This guide is intended for BigFix Master Operators and those who administer an BigFix deployment. If you are looking for information about using the WebUI, see the BigFix WebUI User's Guide.
- Deployment Requirements
  This guide contains information and procedures for installing the WebUI on BigFix Platform V11.0.0 or later. The WebUI is supported on BigFix Platform V11.0.0 and later versions.
- WebUI Installation
  Use these procedures to install or upgrade the WebUI on BigFix Platform version 10 or later. Before you start the procedure:
  - Installation Procedure
    Use this procedure to install the WebUI on BigFix Platform version 10 or later.
  - DB Schema Upgrade Procedure
    Use the DB Schema Upgrade procedure on BigFix Platform version 10 or later to upgrade an existing WebUI installation to use the WebUI with Microsoft SQL Server or the IBM DB2.
  - Change Ports
    Use the Fixlet Change Ports for WebUI Service and Web Reports to change the communication ports.
  - Configure SSL certificates
    Secure Sockets Layer (SSL) certificates enable secure communication between the BigFix WebUI server and all users that access it. Use this procedure to configure SSL certificates for BigFix WebUI.
    - Revoke WebUI Certificates
      You must revoke your certificates if they have been compromised or if they are no longer valid for the intended purpose.
  - Send Notification
    Use the BigFix Send Notification service to trigger an email alert when a deployment completes on all devices, or fails on a specified number of devices. To use the Send Notification service:
  - Access the WebUI
    This section shows how to access the WebUI interface.
- Remove the WebUI Service
  Use this procedure to remove the WebUI from BigFix Platform.
- Provisioning Users
  Use permission settings in the WebUI and the BigFix Console to control access to the WebUI and its functions.
- Managing Application Updates
  You can manage application updates through Application Update Manager.
- Editing Dashboards
  Use the WebUI’s editing tools to customize the WebUI Overview and Executive Overview dashboards.
- Performance
  This chapter provides an introduction to some tools for managing performance problems you might encounter with the WebUI. For a detailed discussion of BigFix and WebUI performance topics and tools, including planning, monitoring, and maintenance, see the BigFix Capacity Planning Guide.
- Log Locations
  All WebUI logs are stored in one default location. Logs are stored on the WebUI Server in the following locations (unless changed by the server setting _WebUI_Logging_LogPath).
- WebUI Server Settings
  Create or modify server settings on your WebUI server to control advanced aspects of the WebUI. These settings are for advanced users only and can be used to help troubleshoot problems or adjust behaviors to optimize performance.
- SAML 2.0
  BigFix supports SAML 2.0. SAML authentication is an application login mechanism that uses a configured Identity Provider (IdP) to authenticate users.
- Troubleshooting
  Read this section for information about any known issues using the WebUI application.
- WebUI and Distributed Server Architecture (DSA)
  Understand how to work with WebUI in Distributed Server Architecture (DSA).
- Supported Patch Sites
  A subset of BigFix patch sites is supported in the WebUI.
- Support
  For more information about this product, see the following resources:

Revoke WebUI Certificates

You must revoke your certificates if they have been compromised or if they are no longer valid for the intended purpose.

To revoke a certificate, use the BESAdmin tool on the root server.

Windows deployment

BESAdmin.exe /revokewebuicredentials /sitePvkLocation:<pvklocation> 
/sitePvkPassword:<pvkpassword> /hostname:<hostname>

Linux deployment

./BESAdmin.sh -revokewebuicredentials -hostname=<hostname_of_the_instance> 
-sitePvkLocation=<pvk_loc> -sitePvkPassword=<pvk_password>

For more information about the BESAdmin tool, see: Additional administration commands.