Home
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Configuration Management for Console User Guide
Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
Using checks and checklists
Check Fixlets

Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
  - Setting up Configuration Management
    Follow these steps to set up your Configuration Management deployment.
  - Using checks and checklists
    - Check Fixlets
    - Modifying check parameters
    - Activating Measured Value Analyses
      Click the Analyses subnode within a checklist to find measured value analyses.
    - Creating and Managing Custom Checklists
    - Using the Synchronize Custom Checks wizard
    - Taking a remediation action
  - Configuring Windows checklists
  - Configuring UNIX checklists
    You can configure the checklists for the AIX®, MAC, and Solaris.
  - Importing SCAP content
  - Configuration Management Reporting
  - Frequently asked questions
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.

Check Fixlets

A check Fixlet becomes relevant when a client computer is out of compliance with a configuration standard. By viewing the Configuration Management Fixlets, you can identify non-compliant computers and the corresponding standards.

To start using the Configuration Management checklists, obtain a masthead for the appropriate Configuration Management site and open it within the BigFix console. When the site has been gathered in the console, follow the steps below to view the checks:

Select a Configuration Management checklist from the navigation tree.
Expand a checklist and click Fixlets and Tasks.
Click one of the Fixlets displayed in the list. The Fixlet opens with the following tabs: Description, Details, Applicable Computers, and Action History. Click the Description tab to view the text describing this Fixlet.

The Fixlet window typically contains a description of the check, options to customize the configuration setting, and a related Action to remediate one or more systems to the expected configuration value.

The Fixlet is applicable to a subset of endpoints on your network. The size of that subset is shown in the Applicable Computers tab.

Note: UNIX controls provide custom parameterization, but through a different mechanism.