Home
Remote Control V9.1.4
BigFix® Remote Control V9.1.4 Installation Guide
By using BigFix® Remote Control you can remotely support and control thousands of PCs and servers, on an enterprise scale, from a central location or directly, in peer to peer mode.
NIST SP800-131A compliance in BigFix® Remote Control
BigFix® Remote Control version 9.1.0 components can be configured for NIST SP800-131A compliance.
Enabling NIST SP800-131A compliance on the controller

Remote Control V9.1.4
- Release Notes V9.1.4 Fixpack 1
- BigFix® Remote Control V9.1.4 Installation Guide
  By using BigFix® Remote Control you can remotely support and control thousands of PCs and servers, on an enterprise scale, from a central location or directly, in peer to peer mode.
  - Audience
  - Versions
  - Terms used in this guide
  - Overview of the BigFix® Remote Control system
  - Get started
    Now that you understand the terms and components available in BigFix® Remote Control, you can identify which components you need to install:
  - Install the BigFix® Remote Control components
    The BigFix® Remote Control components can be installed in two ways. If you have access to the BigFix console, use a deployment fixlet to install the components.
  - Utility for extracting the component installation files
    BigFix® Remote Control provides a utility that you can use to extract the installation files that are required for each component.
  - Enable secure target registration
    To prevent unauthorized targets from registering with the BigFix® Remote Control server, you can enable the secure registration feature and use tokens to authenticate the target.
  - Install the driver for smart card authentication
    The BigFix® Remote Control Target provides an installation option to install a virtual smart card reader driver. You can also install the driver by running a fixlet in the BigFix console.
  - Manage the component services
    After you install the BigFix® Remote Control components, if you change their configuration, you can stop, start, or restart the component services.
  - Enabling email
  - Configure LDAP
  - Federal information processing standard (FIPS 140-2) compliance in BigFix® Remote Control
  - NIST SP800-131A compliance in BigFix® Remote Control
    BigFix® Remote Control version 9.1.0 components can be configured for NIST SP800-131A compliance.
    - Enable NIST SP800-131A compliance on the server
      You can enable NIST SP800-131A compliance on the BigFix® Remote Control server during installation, when you are using the server installer program. You can also enable NIST compliance after installation. To enable NIST SP800-131A compliance for a manual BigFix Remote Control Server installation, you must configure theBigFix Remote Control Server and WebSphere®.
    - Enabling NIST SP800-131A compliance on the controller
      - Enabling NIST SP800-131A compliance in the stand-alone controller
        After you install the stand-alone controller, you can edit the properties file to enable NIST SP800-131A compliance.
    - Creating a certificate for an MS SQL database when NIST SP800-131A is enabled
      When you enable NIST SP800-131A compliance and you are using an MS SQL database, you must create a certificate.
    - Enable NIST SP800-131A compliance on the target
      You can enable NIST SP800-131A compliance on the BigFix® Remote Control target in various ways. NIST SP800-131A compliance can be enabled during installation when you are using the target installation program. You can enable NIST SP800-131A compliance after the installation by editing the target registry on Windows® systems, or by editing the configuration file on Linux® systems.
    - Enabling NIST SP800-131A compliance on the gateway
      You can enable NIST SP800-131A compliance on the gateway component by editing the gateway configuration file that is created when you install gateway support.
    - Enabling NIST SP800-131A compliance on the broker
      You can enable NIST SP800-131A compliance on the broker component by editing the broker configuration file that is created when you install broker support.
    - Enabling NIST SP800-131A compliance on the CLI tools
      NIST SP800-131A compliance can be enabled during installation when you are installing the CLI tools on a Windows operating system. You can enable NIST SP800-131A after you install the CLI tools in Linux by editing the configuration file.
  - Verifying the server installation
  - Recover from installation errors
  - Uninstall the components
  - Upgrade from previous versions
  - Maintaining the target installation
  - Properties that can be set in the target configuration
    You can configure target properties either during or after installation. The operating system on the target system determines which properties can be configured. The target properties determine the actions that can be carried out during a peer-to-peer session. If you set a server URL and set the Managed property to Yes, the actions are determined by the policies that are set on the Remote Control server.
- BigFix® Remote Control V9.1.4 Administrators Guide
  This guide is for users who want to administer BigFix® Remote Control.
- BigFix® Remote Control V9.1.4 Console Users Guide
- BigFix® Remote Control V9.1.4 Controller Users Guide
- BigFix® Remote Control V9.1.4 Target Users Guide
- BigFix® Remote Control V9.1.4 On-demand Target Guide
  Use BigFix® Remote Control to start remote control sessions over the internet with targets that do not have the target software installed.
- Remote Control V9.1.4 Readme file

Enabling NIST SP800-131A compliance on the controller

About this task

The IBM® JRE for Windows® operating system and Linux® (Intel®) operating systems is included with BigFix® Remote Control and is installed when you install the controller software.

If you are using a Windows® system, the JRE is included in the controller package trc_controller_setup.exe and trc_controller.msi. For Linux® systems, the JRE is included in the package ibm-trc-controller-jre-9.x.x.i386.rpm. Where 9.x.x is the version that you want to install. The packages install the IBM® Java™ Run-time Environment preconfigured with the IBM® FIPS certified cryptographic provider and NIST SP800-131A enabled. The packages also register the MIME type application/x-ibm-trc-jws and a file association for *.trcjws files.

To check whether the controller is connected in FIPS or NIST SP800-131A mode during a remote control session, click Controller tools > Show session information. Encryption is set to AES FIPS when FIPS mode is enabled and is set to TLSv1.2 when NIST mode is enabled.