Install Software

The Install Software feature in the Custom Remediation app allows you to deploy software to specific devices by simply providing a download link and targeting filtered devices. This is a powerful and flexible way to deliver software without needing to upload packages manually.

About this task

Use this feature when:

  • You have a publicly accessible or internal URL for a software installer.

  • You want to deploy that software to a subset of devices filtered by OS, name, group, or other criteria.

  • You need a lightweight and quick remediation workflow.

To open the Install Software widget, from the Custom Remediation app, click the Install Software button.
Install Software

Procedure

  1. Enter Software Details:

    • URL: Provide the direct link to the software package hosted online.

      Note: Supported file extensions are .deb, .exe, .msi, .pkg, and .rpm.
    • SHA-256: Secure hash used to verify the integrity of the downloaded file.
    • Size in bytes: Exact file size to validate the download.
    • Installation instructions as Local Administrator: This field is optional. BigFix automatically generates the base installation command based on the file type (for example, .msi, .exe) provided in the URL. You only need to enter optional arguments such as silent install flags.

      Example: If you're installing an MSI and want a silent install, just enter /qn.

      BigFix will generate the full command automatically, e.g., msiexec.exe /i myApp.msi /qn.
      If you leave the field blank, BigFix will still send the appropriate base command, such as 
      msiexec.exe /i
        myApp.msi
      .
      Example Configuration
      Field Example Value
      URL https://example.com/software/app.msi
      SHA-256 3a1f34e... (64-character hash)
      Size in Bytes 10485760
      Software Command app.msi
      Installation Command 
      msiexec.exe /i app.msi /qn
    Click Next.
  2. Devices: Filter target devices and click Next.
  3. Sequence: The configured options are processed sequentially from top to bottom, giving you precise control over how deployments are delivered, how users are informed, and how failures are handled.

    1. Start downloading immediately

      When enabled, targeted endpoints begin downloading the required payloads as soon as the remediation action is deployed.

    2. Before running message

      When enabled, the configured message is displayed to the end user before the action starts. This can be used to provide context, warnings, or request user confirmation.

    3. While running message

      When enabled and a message is configured, during execution of the action, the notification message is shown to indicate that the remediation is currently in progress. This helps maintain user awareness and reduce support inquiries.

    4. Reboot/restart devices on completion of deployment

      After the remediation completes, targeted devices are automatically rebooted if required by the fixlet. This step ensures that changes are properly applied and system integrity is maintained.

    5. On failure: retry x time and wait x hour between attempts

      If the action fails, you can configure:

      • Number of retries: how many times the system should reattempt the action.

      • Wait time between retries: the number of hours to wait between each retry.

      This setting increases the success rate by accounting for temporary issues like device disconnection or network latency.

    Click Next to proceed.

  4. Schedule: Select a time range for the scheduled activity. This setting defines the window during which the schedule remains in effect. After configuring the schedule, click Next to proceed.
    Field Label Description
    Start Date Select the calendar date when the remediation deployment should begin.
    Start Time Select the time (hh:mm) at which the remediation should start.
    Time Zone (Start) Choose the time zone to apply for the start time: - Client: Uses each endpoint's local time. - UTC: Uses Coordinated Universal Time.
    End Date Select the calendar date by which the remediation deployment should be completed.
    End Time Select the time (hh:mm) at which the deployment window ends.
    Run During Agent’s Configured Maintenance Window Enable this option to restrict the deployment to devices that have a maintenance window configured. The remediation will only run within those windows. ❗ Note: Devices without a maintenance window will be excluded from the deployment.
    Run on All Devices, Regardless of Their Configured Maintenance Window Enable this option to override maintenance window restrictions. The remediation will run on all targeted devices, whether or not they have a maintenance window configured.
    Reset Click to clear all current scheduling fields and revert the section to its default state. Use this to start over if needed.
  5. Summary: The Summary section provides a consolidated view of all the configuration options selected in the remediation flow. It acts as the final checkpoint before deployment, allowing you to review and confirm your settings.
    Action name:

    • Enter a unique and meaningful name that clearly describes the purpose of the action.

    • This name will appear in action history, logs, and dashboards, helping you and your team quickly identify and differentiate actions.

    • Use descriptive terms (e.g., "Critical Patch – May 2025 – Windows Devices") to ensure clarity and traceability.

  6. Install: After verifying the configured information, click Install to install the software.