Home
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Configuration Management for Console User Guide
Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
Importing SCAP content
SCAP Checklists

Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
  - Setting up Configuration Management
    Follow these steps to set up your Configuration Management deployment.
  - Using checks and checklists
  - Configuring Windows checklists
  - Configuring UNIX checklists
    You can configure the checklists for the AIX®, MAC, and Solaris.
  - Importing SCAP content
    - Learning about SCAP
    - SCAP Checklists
    - Using the Import SCAP Content wizard
    - Using the Create SCAP Compatible Report wizard
    - Using OVALDI
      Security Configuration Management uses Oval Interpreter (OVALDI), an open-source reference implementation that uses OVAL to scan computer vulnerabilities and generate OVAL full results.
  - Configuration Management Reporting
  - Frequently asked questions
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.

SCAP Checklists

HCL BigFix takes the SCAP checklist XML, generates BigFix content from it, and makes it available through subscription. Users load the external site mastheads for each of the available SCAP checklists in the BigFix console. The BigFix server downloads the content and makes it available to the BigFix administrator to begin evaluating on systems.

BigFix currently provides out-of-the-box content for the Federal Desktop Core Configuration (FDCC) SCAP checklists. As new checklists are made available by NIST, HCL BigFix might include those sites as part of the subscription service.

In addition to the Fixlet sites, BigFix includes a reporting dashboard that provides visibility into the results of the system evaluations and a reporting dashboard for generating BigFix content from an SCAP checklist. These dashboards are found in the SCM Reporting site.

To know the supported SCAP checklists, see the SCM Checklist.