Home
Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
BigFix Compliance Analytics Setup Guide
Installing BigFix Compliance Analytics
Use this guide to deploy and configure the BigFix Compliance Analytics.
Upgrading
When upgrading from earlier versions of BigFix Compliance Analytics, the installer replaces the previously supplied server certificate and private key pair with a new self-signed certificate and key pair.

Compliance Setup Guide and User Guide
BigFix Compliance Analytics is a web-based application designed to help you manage security, vulnerability, and risk assessment. The application archives security and vulnerability compliance check results to identify configuration issues and report levels of compliance toward security configuration goals.
- BigFix Compliance Analytics Setup Guide
  - Introduction
    BigFix Compliance Analytics is a component of BigFix Compliance, that aggregates and reports on the compliance statuses of all endpoints against deployed policies that are continually collected, aggregated, and reported using a powerful Compliance Analytics engine, database and user interface.
  - Installing BigFix Compliance Analytics
    Use this guide to deploy and configure the BigFix Compliance Analytics.
    - Download BigFix Compliance Analytics
      You can download BigFix Compliance Analytics by completing the following steps:
    - Running the Installer
      Follow these steps to install BigFix Compliance Analytics.
    - Upgrading
      When upgrading from earlier versions of BigFix Compliance Analytics, the installer replaces the previously supplied server certificate and private key pair with a new self-signed certificate and key pair.
    - Migrating Keystores
      Follow these steps to migrate keystores in BigFix Compliance Analytics. A keystore is a database file that stores security certificates, such as authorization or public key certificates.
    - Performing initial set up and configuration
      To set up the database connection, perform the following steps:
    - Configure HTTPS
      HCL BigFix Compliance Analytics administrators can configure SSL and the TCP ports from the Management > Server Settings section of the web interface.
    - Configuring LDAP
      BigFix for BigFix Compliance Analytics supports authentication through the Lightweight Directory Access Protocol (LDAP) server.
    - Updating National Vulnerability Database Data Feeds
      Administrator updates the BigFix Compliance Analytics periodically to upload and sychronize the latest vulnerabilities.
    - Log files
      This section describes how to access log files and the options associated with BigFix Compliance Analytics.
  - Uninstalling
    To remove BigFix Compliance from your infrastructure, stop the application-specific actions and analyses that are running on the computers and uninstall the scanner. Remove the VM Manager tool. Subsequently, uninstall the BigFix Compliance server, and optionally eliminate the associated database as well.
  - Configuring report definitions using REST API
    Administrators can use REST API to create, update, and delete saved report view definitions across BFC instances.
  - Disaster recovery for BigFix Compliance Analytics
    Use the standard cold standby method of creating a backup and restoring the system in your disaster recovery plan for BigFix Compliance Analytics.
- BigFix Compliance Analytics User Guide
  BigFix Compliance Analytics is a component of BigFix Compliance, that includes technical controls and tools that are based on industry practices and standards for endpoint and server security configuration.

Upgrading

When upgrading from earlier versions of BigFix Compliance Analytics, the installer replaces the previously supplied server certificate and private key pair with a new self-signed certificate and key pair.

Before you begin

Updating from an earlier version requires updating the data schema as well. The operator must access the BigFix Compliance Analytics web interface from the server hosting BigFix Compliance Analytics. Click Upgrade Schema.

Note:

Before you start the upgrade process, it is strongly recommended that you perform server and database back-up.
You must manually change the Java Heap size to 4GB (or comment out the current java heap size default of 4GB from the jvm.options file under the path: C:\Program Files\IBM\SCA\wlp\usr\servers \server1) for Upgrade fixlet to upgrade the existing v1.9.x and v1.10.x to 2.0.4.x deployment.
Even after the upgrade, it is recommended to change the Java Heap size to 8GB in jvm.options file under the path: C:\Program Files\IBM\SCA\wlp\usr\servers \server1.
A fixlet Warning: Low Heap Size Setting - Bigfix Compliance Server is introduced to help you check the heap size before you start using the Upgrade fixlet.
Restart the BigFix Compliance from BigFix Services.

About this task

To upgrade from earlier versions of BigFix Compliance Analytics, you must configure your SSL certificate settings again. To apply the settings again, go to Management > Server Settings when installation is completed.

Procedure

Click Replace in the Certificate section.
Click Browse... and select your server certificate and private key.
Enter the private key password.
Click Save and restart BigFix Compliance Analytics.
If the original certificate and key pair are difficult to get or are unavailable, follow the steps in Migrating Keystores.