Welcome
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Using RHSM download plug-ins
The download plug-in is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
- Overview
  BigFix®Patch for Red Hat Enterprise Linux™ keeps your Linux clients current with the latest updates and service packs.
- Setup
  Setting up your environment for patch management.
- Using Patch Management for Red Hat Enterprise Linux Extended Update Support
  You can manage Fixlets using dashboards, reports, and wizards. You can deploy, fix, and uninstall Fixlets. You can also view the breakdown of Fixlets available or needed in your deployment.
- Using RHSM download plug-ins
  The download plug-in is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.
- Multiple-Package Baseline Installation
  BigFix Patch provides a solution to combine the installation of updates for multiple packages in a baseline into a single task, which can reduce the execution time of the baseline.
- Understanding RHEL patch add-ons
  This topic gives you a brief introduction about Red Hat Enterprise Linux (RHEL) Patch Add-Ons.
- Frequently Asked Questions
  Learn the answers to frequently asked questions about BigFix EUS/ELS Patch Add-Ons for Red Hat Enterprise Linux 5, 6, 7 and 8.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Using RHSM download plug-ins

The download plug-in is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.

For detailed information about RHSM download plug-ins, refer to Using RHSM download plug-ins.

Follow these one time steps to enable the BigFix EUS Patch functionality:

Configure the RHSM plugin.: EUS/ELS patching uses the BigFix Red Hat Subscription Management (RHSM) download plugin. Entitlement is required to download the content and is provided via certificates. Follow the instruction in the Help Center to download your certificates and set up the RHSM Plugin: Using RHSM download plug-ins.

Check for an updated RHSM plug-in.: Verify that the RHSM plug-in is updated to the latest version in the Manage download plugins dashboard, refer to Upgrading the RHSM download plug-in.

Do the following steps to enable the EUS/ELS patching.: From the Patching Support Site take action on the Fixlet 70 - Enable the EUS/ELS repositories in the RHSM Download Plugin targeting the BigFix server where the RHSM plugin is installed.; Verify that the repositories are reachable. From the command line on the BigFix server run the following for Windows: C:\Program Files (x86)\BigFix Enterprise\BES Server\DownloadPlugins\RHSMProtocol\RHSMPlugin --check-allrepos For Linux: /var/opt/BESServer/DownloadPlugins/RHSMProtocol/RHSMPlugin --check-allrepos

Note: If any of the repos show a zero, then the subscription certificates on the BigFix server do not include those extended repositories. Ensure that the repos that you are interested in do not have zero values.