BigFix UI Command line DEX configuration
To configure the BigFix UI to show the DEX application to the users with 'DEX dashboard' privileges, you can use the BigFix UI command line to configure DEX.
Command-line settings and configuration
- After the initial setup, when the BigFix UI is not running, start the
application with the
BFUI.exe --configure-dexflag. - The user is prompted to enter the admin username and password.
- The user must enter a series of parameters, such as:
- Enter DEX Server IP Address: xxx.xxx.xxx.xxx
- Enter DEX Server Basic Authentication Port: 8081
- Enter DEX Server mTLS Port: 9443
- Enter DEX Admin Username: xyz
- Enter DEX Admin Password: xxx
- Enter BigFix Operator ID: abc
- Enter BigFix Operator Password: xxx
- Enter comma-separated list of IP SANs for DEX certificate: xxx.xxx.xxx.xxx
- Enter comma-separated list of custom sites for DEX certificate: dexCustomSite
- The DEX Server IP Address is the address of the system where the DEX Server is running.
- Basic Auth Port is the port used for communication to initialize the mTLS certificate exchange.
- mTLS port is the port where DEX Server will listen for mTLS requests. If the mTLS port does not match the one defined in the DEX Server, it will be automatically overwritten by the latter.
- The basic authentication port to use is 8081, and the mTLS port to use is 9443.
- The DEX Admin username (and DEX admin password) is the instance administrator of the DEX Server created during the DEX server installation (local user defined on DEX Server).
- BigFix Operator is the master operator that is used by DEX Server when retrieving data from the BigFix Server. The operator impersonates the DEX Server for service requests.
- The SANs can be inserted in a comma-separated list; the first one must match the DEX Server IP address. Others are optional.
- The custom sites list must contain only one site for the moment. The custom site list has to be filled with one custom site that has already been created from the Console. This site has to be owned by the BigFix Operator (see above).
The entered BigFix Operator must have the following grants:
- must be the owner of the custom site provided (if available)
- must have read access to the BigFix DEX external site
- must have read access to others’ actions
- must be capable of stopping others’ actions
- must be capable of creating custom actions
