Key components
The following components make up the QRA solution. Not all are required. Elasticsearch, DataBridge, and the Kibana Dashboard are optional and depend on whether your organization has an existing Elasticsearch deployment.
| Component | Location | Required? | Purpose |
|---|---|---|---|
certscanner
binary |
Deployed to BigFix Clients | Yes | The scanner executable that discovers cryptographic assets on each
endpoint. Cross-platform: Windows (amd64), Linux (x64), macOS (amd64
Intel, arm64 Apple Silicon). Delivered by the Scan Tool Task as
platform-specific packages. Within BigFix, scanning is not available
until the QRA_License client setting is configured; the
license activates the complete capability set: filesystem scanning,
memory scanning, VPN/IPSec detection, quantum readiness scoring, and all
output formats. |
| BigFix Task: "BigFix Quantum Risk Analyzer - Scan Tool" | BigFix Console - QRA site | Yes | The primary BigFix Task that delivers and executes
certscanner on managed endpoints. The license key
is resolved from the QRA_License client setting. Use
its Scan Endpoint action for the standard
endpoint scan, or Scan Endpoint and File System
to include the optional filesystem scan. Three more action options add
Elasticsearch forwarding and CBOM export. |
| BigFix Task: "Configure BigFix Quantum Risk Analyzer Key" | BigFix Console - QRA site | Yes | Writes the QRA license key to the QRA_License client
setting on each targeted endpoint. Run this Task before the Scan Tool
Task; until the setting exists, the Scan Tool Task is not relevant on
those endpoints. |
| BigFix Task: "Kibana Saved Object Dashboard Import" | BigFix Console - QRA site | No (optional) - required only if you deploy the Kibana dashboard | Deploys the pre-built Kibana dashboard for advanced visualization. Only relevant if your organization has Elasticsearch. Requires the Kibana URL and credentials (username and password). |
| BigFix Analyses | BigFix Console / Root Server | Yes | Four Analyses collect and surface scan results: Quantum Risk
Analyzer - Aggregate Dashboard Data and Quantum
Risk Analyzer - On-Demand Detail Data (feed the QRA
Dashboard Web Report), Quantum Risk Analyzer Scan Health
Analysis (feeds the Scan Health Web Report), and
Quantum Risk Analyzer Log file info (optional, for
deep troubleshooting). Analyses must be explicitly activated
before Web Reports can display data. A fifth Analysis, HCL
DataBridge Audit Status, monitors DataBridge transfers on
the Root Server; activate it only when you use DataBridge. |
| BigFix Archive Manager | BigFix Clients and Root Server | No (optional) - required only if you forward results or export CBOM | A standard BigFix Platform capability. Provides the endpoint-to-Root-Server transport for the Elasticsearch-forwarding and CBOM scan actions: the actions compress the scanner output, add it to a QRA Archive Manager file set, and upload it through the relay hierarchy to the Root Server, where DataBridge watches the Upload Manager buffer. All scan data remains at the client to be read by the BigFix Analyses, so you can review data in both BigFix and Elasticsearch from the same scan. |
| BigFix DataBridge | BigFix Root Server | No (optional) - required only if you forward results to Elasticsearch | Transfers scan data to Elasticsearch from the Upload Manager buffer on the Root Server, where Archive Manager uploads arrive. Its key benefit: only the Root Server needs Elasticsearch network access; individual endpoints do not. Eliminates the need to open firewall rules from thousands of endpoints to your Elasticsearch cluster. |
| Elasticsearch + Kibana | Customer-managed | No (optional) - required only for the Kibana dashboard and DataBridge | Third-party platform for advanced analytics and visualization. QRA provides a pre-built Kibana dashboard (NDJSON) that is imported by using the "Kibana Saved Object Dashboard Import" Task. You must supply your own Elasticsearch deployment. |
| BigFix Web Reports | BigFix Web Reports server | Yes | Two QRA-specific Web Reports: (1) BigFix Quantum Risk Analyzer Dashboard - quantum risk assessment and cryptographic inventory. (2) BigFix Quantum Risk Analyzer Scan Health - shows when each endpoint last ran the scanner and whether it succeeded or failed (see Scan Health Report). |