Welcome
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
Administrator Guide
Quantum readiness remediation strategy
Discovering cryptographic risk is only the first step. Remediation for quantum readiness is organized around five pillars for compute devices; BigFix can assist with several of them directly.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
- Administrator Guide
  - Introduction
    The BigFix Quantum Risk Analyzer (QRA) discovers and assesses the cryptographic posture of your managed endpoints and surfaces the results through BigFix Analyses and Web Reports.
  - Key components
    The following components make up the QRA solution. Not all are required. Elasticsearch, DataBridge, and the Kibana Dashboard are optional and depend on whether your organization has an existing Elasticsearch deployment.
  - Before you begin
    Review the system requirements before you deploy QRA. Elasticsearch is optional and is required only for the Kibana dashboard and DataBridge.
  - Deploying and configuring QRA
    Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.
  - Understanding the two scan types
    QRA provides two scan types. The Scan Endpoint action performs the system scan only. The Scan Endpoint and File System action performs both the system scan and the filesystem scan.
  - Reviewing reports
    QRA surfaces scan results through two channels: BigFix Web Reports (available to all QRA deployments) and the optional Kibana Dashboard (for organizations with Elasticsearch).
  - Quantum readiness remediation strategy
    Discovering cryptographic risk is only the first step. Remediation for quantum readiness is organized around five pillars for compute devices; BigFix can assist with several of them directly.
  - Troubleshooting
    Use this table to diagnose and resolve common QRA deployment and reporting issues.
  - Glossary
    Definitions of key terms used in the BigFix Quantum Risk Analyzer documentation.
  - Additional resources
    Related references for the BigFix Quantum Risk Analyzer and the BigFix Platform.
- Reference Guide
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Quantum readiness remediation strategy

Discovering cryptographic risk is only the first step. Remediation for quantum readiness is organized around five pillars for compute devices; BigFix can assist with several of them directly.

Figure 1. Quantum readiness remediation pillars. The five primary remediation pillars for compute devices. BigFix can assist with the operating system, hardware, application, and configuration pillars; certificate reissuance is outside BigFix capabilities.

Table 1. Remediation pillars and the BigFix role
Pillar	Remediation focus	BigFix role
Operating Systems	Upgrades and decommission	OS deployment and server automation.
Hardware	Upgrades, refresh, and decommission	Hardware imaging support for replacement of non-compliant hardware.
Applications	Upgrades and decommission	Deploying quantum-safe application versions.
Configs	Application and OS configurations	Reconfiguring applications for quantum-safe communication, including switching to quantum-only once transition completes.
Certificates	Reissue	Certificate reissuance is outside current BigFix functional capabilities; BigFix provides full environmental visibility to support the effort.

Note:

Most organizations will operate in a hybrid mode during transition, allowing older devices to connect while quantum-safe communication paths are phased in. BigFix can assist in reconfiguring applications to quantum-only once the transition is complete.