Welcome
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
Administrator Guide
Deploying and configuring QRA
Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.
Activating the QRA Analyses
Activate the QRA Analyses so that the BigFix Clients report scan properties to the Root Server. Web Reports display no data until the Analyses are active.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Quantum Risk Analyzer
The BigFix Quantum Risk Analyzer (QRA) is an add-on that discovers and assesses the cryptographic posture of your managed endpoints, so you can find quantum-vulnerable systems, prioritize remediation, and demonstrate compliance from the BigFix Console.
- Administrator Guide
  - Introduction
    The BigFix Quantum Risk Analyzer (QRA) discovers and assesses the cryptographic posture of your managed endpoints and surfaces the results through BigFix Analyses and Web Reports.
  - Key components
    The following components make up the QRA solution. Not all are required. Elasticsearch, DataBridge, and the Kibana Dashboard are optional and depend on whether your organization has an existing Elasticsearch deployment.
  - Before you begin
    Review the system requirements before you deploy QRA. Elasticsearch is optional and is required only for the Kibana dashboard and DataBridge.
  - Deploying and configuring QRA
    Deploying QRA involves several distinct procedures. Complete them in the order presented. The DataBridge and Kibana dashboard procedures are optional and apply only if you have Elasticsearch.
    - Subscribing to the QRA site
      Subscribe your target endpoints to the BigFix Quantum Risk Analyzer external site so that the QRA Tasks and Analyses appear in the BigFix Console.
    - Activating the QRA Analyses
      Activate the QRA Analyses so that the BigFix Clients report scan properties to the Root Server. Web Reports display no data until the Analyses are active.
    - Configuring the QRA license key
      Run the Configure BigFix Quantum Risk Analyzer Key Task to write your license key to the QRA_License client setting on each endpoint you intend to scan.
    - Deploying the scan
      Run the BigFix Quantum Risk Analyzer - Scan Tool Task to scan your endpoints. Choose the Take Action option that matches your scan scope and output destination.
    - Configuring DataBridge
      Install and configure DataBridge on the BigFix Root Server to forward scan results to Elasticsearch. Complete this task only if your organization uses Elasticsearch.
    - Deploying the Kibana dashboard
      Import the pre-built Kibana dashboard that visualizes QRA scan data stored in Elasticsearch. Complete this task only if your organization uses Elasticsearch.
  - Understanding the two scan types
    QRA provides two scan types. The Scan Endpoint action performs the system scan only. The Scan Endpoint and File System action performs both the system scan and the filesystem scan.
  - Reviewing reports
    QRA surfaces scan results through two channels: BigFix Web Reports (available to all QRA deployments) and the optional Kibana Dashboard (for organizations with Elasticsearch).
  - Quantum readiness remediation strategy
    Discovering cryptographic risk is only the first step. Remediation for quantum readiness is organized around five pillars for compute devices; BigFix can assist with several of them directly.
  - Troubleshooting
    Use this table to diagnose and resolve common QRA deployment and reporting issues.
  - Glossary
    Definitions of key terms used in the BigFix Quantum Risk Analyzer documentation.
  - Additional resources
    Related references for the BigFix Quantum Risk Analyzer and the BigFix Platform.
- Reference Guide
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Activating the QRA Analyses

Activate the QRA Analyses so that the BigFix Clients report scan properties to the Root Server. Web Reports display no data until the Analyses are active.

About this task

CAUTION:

This step is required before Web Reports show any scan data. If you skip activating the Analyses, the QRA Web Reports display no results even after scans run successfully.

Procedure

In the BigFix Console Domain Panel, navigate to the QRA site and expand Analyses.
Right-click each Analysis and select Activate.
The Description tab also offers a "Click here to activate this analysis" link. Activate these Analyses on the endpoints you plan to scan:
- Quantum Risk Analyzer - Aggregate Dashboard Data - initial summarized view of the QRA Dashboard Web Report.
- Quantum Risk Analyzer - On-Demand Detail Data - evidence detail, loaded only after you select Load details in the Dashboard report.
- Quantum Risk Analyzer Scan Health Analysis - operational status behind the Scan Health Web Report (status, phase, start and end time, duration, last activity, scan age, and common failure conditions).
- Quantum Risk Analyzer Log file info - activate only when raw scanner output is needed for troubleshooting.
Figure 1. QRA site: Analyses. Select an Analysis and click Activate; the list shows the four QRA Analyses and HCL DataBridge Audit Status.

Results

After activation, the Analyses begin collecting properties from BigFix Clients on their next evaluation cycle. Data appears in Web Reports once scans have run.

Tip:

BigFix Analyses are collections of Relevance property expressions activated against targeted endpoints. When activated, each managed BigFix Client evaluates the Analysis properties and reports results back to the Root Server, where they are aggregated for Web Reports. See the BigFix Platform documentation on Analyses for background.