Home
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Security Configuration Management for WebUI User Guide
Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.
SCM App in WebUI: Overview
The SCM App landing page lists all the custom and external checklists that are used to manage devices.
Custom check
A custom checklist includes many checks which enables the security teams to preserve the compliance standards of an organisation. Similarly, checks within a checklist perform various type of actions and ensures the pre-defined parameters of the checks are met.

Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.
  - Welcome to the SCM App in WebUI
    Security Configuration Management (SCM) is a collection of checks and checklists that organizations can use to configure devices and ensure that the devices meet compliance standards.
  - What's new in SCM App in WebUI
    This topic provides information about the new features and updates in SCM App in WebUI.
  - System requirements
    SCM App in WebUI requires certain system requirements to work in your environment, this topic provides the necessary information to use SCM App.
  - Supported benchmarks
  - SCM App in WebUI: Overview
    The SCM App landing page lists all the custom and external checklists that are used to manage devices.
    - Custom checklist
      A custom checklist is a modified version or a copy of an external checklist. These checklists are created by using one or more external checklists. With custom checklists, Master Operators (MO) can exclude certain checks from an external checklist and deploy those checklists to any device.
    - Custom check
      A custom checklist includes many checks which enables the security teams to preserve the compliance standards of an organisation. Similarly, checks within a checklist perform various type of actions and ensures the pre-defined parameters of the checks are met.
      - Creating a custom check using relevance
        This task helps you in creating a custom check using relevance.
      - Creating a custom check using Unix content
        This task helps you in creating a custom check using Unix content.
      - Editing a custom check
        Understand how to edit a custom copy of a check or the checks which are created and added to the custom checklist.
      - Deleting a custom check or checks
        Understand how to delete a custom copy of a check or the checks which are created and added to the custom checklist. You can delete multiple custom checks or an individual custom check from the custom checklist details page.
    - External checklist
      SCM App in WebUI uses various benchmark checklists to ensure that the device meet the compliance standards. You can use these external checklists to manage devices or create custom checklist as per the requirement. For more information about external checklist, see Supported Benchmarks.
    - Exporting report
      Use export feature to save report for a particular custom or external checklist.
    - Inline reports
      Inline reports provide the status of selected custom or external checklist in the form of chart and graphs which assess the available checks in the selected checklist.

Custom check

A custom checklist includes many checks which enables the security teams to preserve the compliance standards of an organisation. Similarly, checks within a checklist perform various type of actions and ensures the pre-defined parameters of the checks are met.

Based on the roles and permissions in BigFix console Master operator (MO) and Non-master operator (NMO) can perform various activities.

With SCM App in WebUI you can create, edit, or delete one or more checks. You must meet the following prerequisites to create, edit, or delete a check:

Ensure that you have a custom checklist that is created through Create custom checklist wizard in the SCM App.
Ensure that the custom checks are up to date and that bug fixes are installed with the Synchronize Custom Checks wizard in the WebUI.
Ensure that you have Owner and Write permission for the checklist to create, edit, and delete a check.

The following table lists the activities that a MO and NMO can perform under specific condition:

Activity	Master operator (MO)	Non-master operator (NMO)
Create a custom check	Yes	Yes⁽¹⁾
Delete or Edit a custom check	Yes	Yes⁽¹⁾
View a custom check	Yes	Yes⁽²⁾

Note:

Access to custom content must be "Yes" in BigFix console roles and permission. When roles and persmission is set to "No", you cannot create, edit or delete a check even if you owner or write permission for the checklist.
You must have read permission to view a custom check.