Welcome
BigFix Workspace - US Federal
BigFix Digital Employee Experience (DEX)
Administrating DEX
DEX Installation
This topic provides a detailed sequence of steps required to install all BigFix DEX components. The installation must follow the order listed to ensure successful integration and configuration of all dependent services.
BigFix UI Installation
This topic provides an overview of the BigFix UI Configuration Manager setup process and describes the sequential steps required to complete the configuration of your BigFix UI.
Installation
This topic explains how to install the BigFixUI.exe file to initiate the BigFix UI Setup. It also outlines the steps to configure settings using the BigFix UI Configuration Manager tool.
Configure Certificate Settings
This task explains how to set up or update certificate configurations required for secure communication in the BigFix UI Configuration Manager.

BigFix Documentation Homepage
BigFix Workspace
BigFix Workspace+
BigFix Workspace - US Federal
- BigFix Platform
- BigFix Lifecycle
- BigFix Remediate
- BigFix Compliance
- BigFix Inventory
- CISA KEV Content Pack
- Windows ESU
- RHEL ESU
- PCI DSS
- BigFix Digital Employee Experience (DEX)
  - Using DEX
    Welcome to the BigFix DEX documentation, where you can find information about how to install and configure BigFix DEX (Digital Employee Experience). DEX is a endpoint experience management application that provides simplified view of your IT environment and make well-informed decisions to increase the productivity of employees.
  - Administrating DEX
    - DEX Installation
      This topic provides a detailed sequence of steps required to install all BigFix DEX components. The installation must follow the order listed to ensure successful integration and configuration of all dependent services.
      - DEX Capacity Plan
        Capacity Planning is the proactive practice of checking your IT environments' current endpoint usage and forecast when they will run out of resources. The main objective is to prevent performance drops or system crashes before they happen.
      - DEX Deployment Requirements
        This section outlines the hardware, network, and storage specifications required to deploy DEX.
      - DEX Prerequisites
        Before installing DEX, the following set of prerequisites must be met:
      - Analysis
      - Fixlets
      - System support and requirements
        This topic provides information about the system requirements for DEX.
      - BigFix UI Installation
        This topic provides an overview of the BigFix UI Configuration Manager setup process and describes the sequential steps required to complete the configuration of your BigFix UI.
        System Requirements
        This topic provides details about the environment requirements for running and configuring the BigFix UI. It outlines the supported hardware and software platforms, and the methods available to initiate the setup.
        Installation
        This topic explains how to install the BigFixUI.exe file to initiate the BigFix UI Setup. It also outlines the steps to configure settings using the BigFix UI Configuration Manager tool.
        Configure Administrative Credentials
        This topic explains about Application instance credential that used to initially set up and configure the application. This credential acts as a local application identity and is required to secure the configuration mode.
        Configure Database Settings
        This task explains how to select a supported database type and provide the required connection details to configure the database in the BigFix UI Configuration Manager.
        Configure Certificate Settings
        This task explains how to set up or update certificate configurations required for secure communication in the BigFix UI Configuration Manager.
        Configure Application Settings
        Use this step to define application-level settings such as communication protocol, web server port, CORS origins, and security mode for the BigFix UI.
        Configure mTLS Certificate
        Use this step to configure mutual TLS (mTLS) certificates for secure internal and external communications.
        Configure BES Explorer
        Use this step to configure the BES Explorer instance for secure communication with the BigFix UI application.
        Deploy Frontend
        The frontend deployment is the final step in the BigFix UI Configuration Manager setup process. In this step, the system unpacks and installs the frontend files required for the application’s user interface. Deploying the frontend ensures that all previously configured components; administrative credentials, database settings, and certificates are integrated and accessible through the application interface. Completing this step finalizes the setup and makes the BigFix UI ready for use.
        Getting into BigFix UI
        This section provides an overview of the initial setup and startup configurations required to access and use the BigFix UI after deployment. It includes details about configurable variables, port mappings, and the process to start the application.
        Uninstallation
        This topic explains how to uninstall the BigFixUI application.
      - DEX Installation
        This topic provides a detailed sequence of steps required to install all BigFix DEX components. The installation must follow the order listed to ensure successful integration and configuration of all dependent services.
      - BigFix Self-Service Application
        The BigFix Self-Service Application (SSA) is a client-side interface that empowers endpoint users to install software, accept administrative actions, and review deployments without requiring local administrator privileges.
      - Firewalls configuration
      - BigFix UI Command line DEX configuration
        To configure the BigFix UI to show the DEX application to the users with 'DEX dashboard' privileges, you can use the BigFix UI command line to configure DEX.
    - Configuration
      BigFix DEX provides four configuration Fixlets, one for each DEX component, to support post-installation configuration and reconfiguration.
    - Upgrade
      The upgrade Fixlets are available for each of the four DEX components, which internally refers to the same directory path where the installation was previously performed.
  - Knowing BigFix UI
    BigFix UI is a unified interface that consolidates multiple BigFix capabilities into one modern application. It provides IT operations and security teams with a centralized workspace to manage endpoints, remediate vulnerabilities, and generate reports.
  - Integrations available with DEX
    The Service Now, Remote Control and Historical data integration are available using the APIs. For information on the respective areas, refer to their documentations.
  - Troubleshooting DEX Application Issues
    This section provides sinformation about the types of issues and te ways to solve it.
- BigFix Resolve

Configure Certificate Settings

This task explains how to set up or update certificate configurations required for secure communication in the BigFix UI Configuration Manager.

About this task

Use this task to configure certificate settings for the BigFix UI Configuration Manager. You can use a self-signed certificate generated by the system or provide your own certificate and key in PEM format.

Procedure

After completing database configuration, click Next to open the Certificate Configurations screen.
If the system detects existing certificate settings, a message is displayed indicating that the application is already configured with certificates.

Click the provided link to change your certificate configuration, if needed.
If there is no existing certificate, a Certificate Configuration setup screen displayed.

Under Certificate options, select one of the following:
- Use a self-signed certificate: The system generates the certificate automatically.
- Provide your own certificate and key:You must manually enter the required details.
When Provide your own certificate and key is selected, enter:
- FQDN – Fully Qualified Domain Name for the certificate
- Certificate content (PEM format) – Paste or upload the PEM certificate text.
- Key content (PEM format) – Paste or upload the PEM key text.
Note:
- All mandatory fields are marked with an asterisk (*).
- Certificates and keys must be in PEM format.
- A self-signed certificate option is recommended only for testing or non-production environments.
After filling in all mandatory fields, click Next button.

If the certificate is accepted, a success message such as "Certificate received successfully" appears, and you proceed to the next setup step.

If the certificate is invalid, an error message is displayed, and you remain on the same screen until the issue is resolved.
If there is an error, click Reset button to clear all the entered information. A confirmation dialog appears with the options:
- Reset - Clears all fields and reverts them to default values.
- Cancel - Closes the dialog without resetting fields.
If you want to exit the setup process, click the X icon in the top-right corner of the screen. An exit confirmation dialog displayed.
- Click Okay, Exit to terminate the setup and close the application window.
- Click Cancel to remain on the current screen.