Home
Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
Setup
Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
Setting up custom reporting for BigFix Compliance Analytics V1.8 and earlier
BigFix Compliance PCI Add-on provides reports that show the cumulative state aggregated on the level of specific PCI DSS requirements or milestones. To view such reports on BigFix Compliance Analytics V1.8 and earlier console, you must complete a few configuration steps.
Updating the Requirements and Milestones reports manually
You must complete configuration steps to update the Requirements and Milestones reports. This information is applicable only to BigFix Compliance Analytics V1.8 or earlier.

Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Overview
  HCL BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based on the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Setup
  Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
  - Subscribing to the SCM reporting site
    To fully use the reporting functions in the BigFix Compliance Analytics, you must subscribe to the SCM reporting site.
  - Accessing the PCI DSS Fixlet sites
    Before you can access the security configuration checklists that are related to PCI DSS, you must acquire the sites and accept the license agreement. After you acquire the site, you must gather the contents of the site to your console. You must also subscribe your computers to the site so that they can access the PCI DSS content.
  - Configuring endpoints
    Some checklists require you to run the Environment Setup Task to populate the necessary properties on the endpoints to enable relevance evaluation. Run this task when it shows as relevant and refresh the results on the endpoint.
  - Setting up the PCI DSS Policy Reports for BigFix Compliance Analytics V1.9 and later
    BigFix Compliance Analytics version 1.9 provides PCI DSS Policy reports that contain aggregated data across checklists, which identifies the level of compliance for a specific PCI DSS requirement or milestone. To generate the policy reports, complete the required setup.
  - Setting up custom reporting for BigFix Compliance Analytics V1.8 and earlier
    BigFix Compliance PCI Add-on provides reports that show the cumulative state aggregated on the level of specific PCI DSS requirements or milestones. To view such reports on BigFix Compliance Analytics V1.8 and earlier console, you must complete a few configuration steps.
    - Installing the Requirements and Milestones reports manually
      You must complete configuration steps to install the Requirements and Milestones reports in your BigFix environment. This information applies only to BigFix Compliance Analytics V1.8 or earlier.
    - Updating the Requirements and Milestones reports manually
      You must complete configuration steps to update the Requirements and Milestones reports. This information is applicable only to BigFix Compliance Analytics V1.8 or earlier.
    - Installing the Requirements and Milestones reports with the import_milestones.sh script
      The provided installation script creates and configures the necessary files to collect data from the endpoints and display them in the reports in BigFix Compliance Analytics version 1.8 or earlier.
    - Updating the Requirements and Milestones reports with the import_milestones.sh script
      Use the import_milestones.sh script to update the Requirements and Milestones Reporting.
- Using checks and checklists
  The check Fixlets in Configuration Management checklists assess an endpoint against a configuration standard. Many check Fixlets have a corresponding analysis, sometimes referred to as measured values, that report the value of the element that the check Fixlet evaluates.
- Understanding the results in BigFix Compliance Analytics
  Use BigFix Compliance Analytics (formerly known as Security and Compliance Analytics or SCA) to navigate and explore security configuration check results.
- Resources
  You can find more information about Security Configuration Management and PCI DSS in the following resources.

Updating the Requirements and Milestones reports manually

You must complete configuration steps to update the Requirements and Milestones reports. This information is applicable only to BigFix Compliance Analytics V1.8 or earlier.

Procedure

Remove all the Fixlets and analyses in every custom site that you have created for the reporting. You might also need to delete the custom site. This step ensures that no duplicates are created.
Import the new version of the Fixlets and analyses by importing the definitions from the .bes files.
1. On your local disk, browse for the Fixlet that you want to add in the custom site and double-click on it. The dialog window on the BigFix console opens.
2. On the right-upper corner of the console, select the custom site that you created for this Fixlet in step 1 and click OK.
After the sites are updated, you need to run both environmental setup tasks.

There are two separate environment setup tasks. One task is designed for the PCIDSS Milestone site and the other for all other Requirement and Milestones Reporting sites. Both of them are located under PCIDSS_Milestones site.

Note: Ensure that computers are subscribed to the site.