Home
Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
Setup
Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
Setting up custom reporting for BigFix Compliance Analytics V1.8 and earlier
BigFix Compliance PCI Add-on provides reports that show the cumulative state aggregated on the level of specific PCI DSS requirements or milestones. To view such reports on BigFix Compliance Analytics V1.8 and earlier console, you must complete a few configuration steps.
Updating the Requirements and Milestones reports with the import_milestones.sh script
Use the import_milestones.sh script to update the Requirements and Milestones Reporting.

Payment Card Industry (PCI) Add-on User Guide
BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Overview
  HCL BigFix Compliance PCI Add-on is a new chargeable component that provides security configuration checklists that are based on the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
- Setup
  Complete configuration steps to access the PCI DSS checklists and checks and ensure accurate relevance evaluation on the endpoints.
  - Subscribing to the SCM reporting site
    To fully use the reporting functions in the BigFix Compliance Analytics, you must subscribe to the SCM reporting site.
  - Accessing the PCI DSS Fixlet sites
    Before you can access the security configuration checklists that are related to PCI DSS, you must acquire the sites and accept the license agreement. After you acquire the site, you must gather the contents of the site to your console. You must also subscribe your computers to the site so that they can access the PCI DSS content.
  - Configuring endpoints
    Some checklists require you to run the Environment Setup Task to populate the necessary properties on the endpoints to enable relevance evaluation. Run this task when it shows as relevant and refresh the results on the endpoint.
  - Setting up the PCI DSS Policy Reports for BigFix Compliance Analytics V1.9 and later
    BigFix Compliance Analytics version 1.9 provides PCI DSS Policy reports that contain aggregated data across checklists, which identifies the level of compliance for a specific PCI DSS requirement or milestone. To generate the policy reports, complete the required setup.
  - Setting up custom reporting for BigFix Compliance Analytics V1.8 and earlier
    BigFix Compliance PCI Add-on provides reports that show the cumulative state aggregated on the level of specific PCI DSS requirements or milestones. To view such reports on BigFix Compliance Analytics V1.8 and earlier console, you must complete a few configuration steps.
    - Installing the Requirements and Milestones reports manually
      You must complete configuration steps to install the Requirements and Milestones reports in your BigFix environment. This information applies only to BigFix Compliance Analytics V1.8 or earlier.
    - Updating the Requirements and Milestones reports manually
      You must complete configuration steps to update the Requirements and Milestones reports. This information is applicable only to BigFix Compliance Analytics V1.8 or earlier.
    - Installing the Requirements and Milestones reports with the import_milestones.sh script
      The provided installation script creates and configures the necessary files to collect data from the endpoints and display them in the reports in BigFix Compliance Analytics version 1.8 or earlier.
    - Updating the Requirements and Milestones reports with the import_milestones.sh script
      Use the import_milestones.sh script to update the Requirements and Milestones Reporting.
- Using checks and checklists
  The check Fixlets in Configuration Management checklists assess an endpoint against a configuration standard. Many check Fixlets have a corresponding analysis, sometimes referred to as measured values, that report the value of the element that the check Fixlet evaluates.
- Understanding the results in BigFix Compliance Analytics
  Use BigFix Compliance Analytics (formerly known as Security and Compliance Analytics or SCA) to navigate and explore security configuration check results.
- Resources
  You can find more information about Security Configuration Management and PCI DSS in the following resources.

Updating the Requirements and Milestones reports with the import_milestones.sh script

Use the import_milestones.sh script to update the Requirements and Milestones Reporting.

About this task

To update the reports, you can use the script the same way as you would during the installation. For details about the steps, see Installing the Requirements and Milestones reports with the import_milestones.sh script.

The import_milestones.sh script removes the Fixlets and analyses from the relevant reporting custom sites and imports the new versions of the files. During the removal, the percentage of action progress will be presented. The whole process might take approximately one hour to complete.

Results

When the update process is completed, all the sites contain the new Fixlets and analyses.

The computer assignments using the computer groups will not be affected.