Welcome
BigFix Workspace
BigFix Digital Employee Experience (DEX)
Administrating DEX
Configuration
BigFix DEX provides four configuration Fixlets, one for each DEX component, to support post-installation configuration and reconfiguration.

BigFix Documentation Homepage
BigFix Workspace
- BigFix Platform
- BigFix Lifecycle
- BigFix Remediate
- BigFix Compliance
- BigFix Inventory
- BigFix Mobile
- BigFix Digital Employee Experience (DEX)
  - Using DEX
    Welcome to the BigFix DEX documentation, where you can find information about how to install and configure BigFix DEX (Digital Employee Experience). DEX is a endpoint experience management application that provides simplified view of your IT environment and make well-informed decisions to increase the productivity of employees.
  - Administrating DEX
    - DEX Installation
      This topic provides a detailed sequence of steps required to install all BigFix DEX components. The installation must follow this order: Data services (MSSQL, ClickHouse, NATS JetStream: any order) > DEX Server > (DEX FillDB + Root Server DEX Plugin: any order) > Configure DEX in BFUI → Scanner DEX Plugin on endpoints.
    - Configuration
      BigFix DEX provides four configuration Fixlets, one for each DEX component, to support post-installation configuration and reconfiguration.
      - Configuring DEX Instance Owner Credentials Management
      - Configuring DEX Scanner Plugin and Scanner Log Trace Settings
      - Creating DEX Runtime User Fixlet
        This fixlet authenticates using DB admin credentials and creates a runtime user. This configuration is not part of the installation flow but requires DEX Server installation done as prerequisite.
      - Dropping DEX Runtime User Fixlet
        This fixlet authenticates using DB admin credentials and drops an existing runtime user. This configuration is not part of the installation flow but requires DEX Server installation the be there as a prerequisite.
      - Configuring DEX Operator Permissions and Access
        Provide Non-Master Operators (NMOs) with the necessary site visibility and role permissions to view assigned devices and manage surveys within BigFix DEX.
      - Cleaning up Clickhouse Backup Log Tables
        This fixlet authenticates using the ClickHouse admin credentials and cleans up rotated ClickHouse system log tables. Dropping the backup tables that were generated post Clickhouse Installation. The configuration is not part of the installation flow but requires ClickHouse installation to be there as a prerequisite.
      - NTP Drift Remediation Fixlet
        This fixlet detects endpoints whose system clock has drifted out of sync with the configured NTP time source and remediates them by forcing a resync. Accurate system time is required for authentication protocols (Kerberos), certificate validation, log correlation, and any service that depends on timestamp ordering across machines. When an endpoint's clock drifts beyond an acceptable threshold, this fixlet becomes relevant and can be deployed to bring it back into alignment.
      - Support for BFUI License Reclamation with mTLS
      - DEX Global Settings
        BigFix DEX version 2.2 provides a global settings feature that supports shows global parameters applicable to the whole DEX system and universally valid for all endpoints. This feature ensures uniform metric baselines and SLA leaves across Windows and macOS environments. For more information, refer to BigFix_DEX/DEX/configuring_DEX_global_profile_settings.html.
    - Upgrade
      The upgrade Fixlets are available for each of the four DEX components, which internally refers to the same directory path where the installation was previously performed.
  - Integrations available with DEX
    The Service Now, Remote Control and Historical data integration are available using the APIs. For information on the respective areas, refer to their documentations.
  - Troubleshooting DEX Application Issues
    This section provides information about the types of issues and the ways to solve it.
- BigFix Resolve
- CISA KEV Content Pack
- Windows ESU
- RHEL ESU
- PCI DSS
BigFix Workspace+
BigFix Workspace - US Federal

Configuration

BigFix DEX provides four configuration Fixlets, one for each DEX component, to support post-installation configuration and reconfiguration.

Available configuration Fixlets:


Name	Category	Description
Configure NATS JetStream JetStream Service (WIN)	Configure	Use the fixlet to configure the NATS JetStream Service.
Configure DEX Scanner Plugin and Scanner Log Trace Settings (WIN)	Configure	Use the fixlet to configure the DEX Service and Scanner Log Trace Settings.
Configure BigFix Root Server DEX Plugin	Configure	Use the fixlet to configure BigFix Root Server DEX Plugin
Configure Dex Server (WIN)	Configure	Use the fixlet to configure DEX Server.
Configure Dex FillDB (WIN)	Configure	Use the fixlet to configure DEX FillDB.
Self-Service Application Setting: Show or Hide the Survey tab	Configure	Use the fixlet to enable Survey tab in SSA

Server-side Component Configuration Fixlets

The configuration Fixlets for the DEX Server, DEX FillDB, and Root Server DEX Plugin allow post-installation reconfiguration using the same parameters available during installation.

Behavior and workflow

All configuration parameters are optional.
Users can provide only the specific parameters that need to be updated.
Any parameter not supplied retains its existing value.
The Fixlet can be executed at any time after installation.

When the Fixlet is deployed, the service installer applies the updated parameter values, preserves all other existing settings, and restarts the corresponding service to apply the new configuration (for example, updating a service port).

This approach enables safe, targeted configuration changes without requiring a full reinstallation.