Welcome
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
Administrator Guide
Deploying and configuring QRA
Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
- Administrator Guide
  - Introduction
    The BigFix Quantum Risk Analyzer (QRA) discovers and assesses the cryptographic posture of your managed endpoints and surfaces the results through BigFix Analyses and Web Reports.
  - Key components
    The following components make up the QRA solution. Not all are required. Elasticsearch, DataBridge, and the Kibana Dashboard are optional and depend on whether your organization has an existing Elasticsearch deployment.
  - Before you begin
    Review the system requirements before you deploy QRA. Elasticsearch is optional and is required only for the Kibana dashboard and DataBridge.
  - Deploying and configuring QRA
    Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.
    - Subscribing to the QRA site
      Subscribe your target endpoints to the BigFix Quantum Risk Analyzer external site so that the QRA Tasks and Analyses appear in the BigFix Console.
    - Activating the QRA Analyses
      Activate the QRA Analyses so that the BigFix Clients report scan properties to the Root Server. Web Reports display no data until the Analyses are active.
    - Configuring the QRA license key
      Run the Configure BigFix Quantum Risk Analyzer Key Task to write your license key to the QRA_License client setting on each endpoint you intend to scan.
    - Deploying the scan
      Run the BigFix Quantum Risk Analyzer - Scan Tool Task to scan your endpoints. Choose the Take Action option that matches your scan scope and output destination.
    - Configuring DataBridge
      Install and configure DataBridge on the BigFix Root Server to forward scan results to Elasticsearch. Complete this task only if your organization uses Elasticsearch.
    - Deploying the Kibana dashboard
      Import the pre-built Kibana dashboard that visualizes QRA scan data stored in Elasticsearch. Complete this task only if your organization uses Elasticsearch.
  - Understanding the two scan types
    QRA provides two scan types. The Scan Endpoint action performs the system scan only. The Scan Endpoint and File System action performs both the system scan and the filesystem scan.
  - Reviewing reports
    QRA surfaces scan results through two channels: BigFix Web Reports (available to all QRA deployments) and the optional Kibana Dashboard (for organizations with Elasticsearch).
  - Quantum readiness remediation strategy
    Discovering cryptographic risk is only the first step. Remediation for quantum readiness is organized around five pillars for compute devices; BigFix can assist with several of them directly.
  - Troubleshooting
    Use this table to diagnose and resolve common QRA deployment and reporting issues.
  - Glossary
    Definitions of key terms used in the BigFix Quantum Risk Analyzer documentation.
  - Additional resources
    Related references for the BigFix Quantum Risk Analyzer and the BigFix Platform.
- Reference Guide
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Deploying and configuring QRA

Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.

Complete the following procedures in order:

Subscribing to the QRA site - make the QRA Tasks and Analyses available in the BigFix Console.
Activating the QRA Analyses - required before Web Reports can display any scan data.
Configuring the QRA license key - required before the scan Task becomes relevant on your endpoints.
Deploying the scan - run the endpoint scan, optionally including the file system.
Configuring DataBridge (optional) - forward results to Elasticsearch.
Deploying the Kibana dashboard (optional) - import the pre-built Kibana dashboard.

Note:

Configuring DataBridge and deploying the Kibana dashboard apply only to environments with Elasticsearch. The standard workflow - subscribe, activate the Analyses, configure the license key, and scan - produces the BigFix Web Reports without Elasticsearch.