Home
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Configuration Management for Console User Guide
Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
Using checks and checklists
Using the Synchronize Custom Checks wizard
Scanning for out-of-date checks
You can make basic global scans or detailed targeted scans for out-of-date checks.

Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
  - Setting up Configuration Management
    Follow these steps to set up your Configuration Management deployment.
  - Using checks and checklists
    - Check Fixlets
    - Modifying check parameters
    - Activating Measured Value Analyses
      Click the Analyses subnode within a checklist to find measured value analyses.
    - Creating and Managing Custom Checklists
    - Using the Synchronize Custom Checks wizard
      - Scanning for out-of-date checks
        You can make basic global scans or detailed targeted scans for out-of-date checks.
      - Synchronizing out-of-date checks
      - Preserving custom remediation actions
        Follow these steps to preserve manually edited remediation action scripts for checks in your custom checklists.
    - Taking a remediation action
  - Configuring Windows checklists
  - Configuring UNIX checklists
    You can configure the checklists for the AIX®, MAC, and Solaris.
  - Importing SCAP content
  - Configuration Management Reporting
  - Frequently asked questions
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.

Scanning for out-of-date checks

You can make basic global scans or detailed targeted scans for out-of-date checks.

Before you begin

The custom checklist that you will synchronize must be created with the latest version of the Create Custom Checklist wizard (SCM Reporting version 36 or later).

About this task

This wizard scans all SCM custom checklists for external updates, and displays the checklists that need an update or synchronization in the table. Please note that this scan will not detect checks that have been added to or removed from an external site.

The detailed targeted scan requires the user to select a source checklist (external) and a destination checklist (custom) before performing the scan. This scan does a limited scan that performs a comparison of the source and destination checklists to determine whether or not there are any: out of date custom checks, newly added external checks, or recently removed external checks.

This scan is designed for use only in cases where the user intends to maintain an up-to-date copy of an entire external checklist. If the destination was not originally created as a copy of the source, the results of this scan may be confusing and/or misleading; however, there are no hard restrictions to this end, and the user may perform a detailed targeted scan comparison between any external and custom checklist pair.

Procedure

Select the appropriate tab.
- Basic Global Scan
- Detailed Targeted Scan
1. Select the source from the external checklists.
2. Select the destination of the custom checklist.
3. Option: Click the Only show drop-down menu to select from the filter choices.
Click Scan to scan for out-of-sync checks.