Home
Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
Configuration Management for Console User Guide
Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
Configuring UNIX checklists
You can configure checklists for the superseded and non-superseded UNIX content.

Configuration Management (SCM)
BigFix Compliance Configuration Management (SCM) includes configurable content that is checks and checklists, which assess and manages the devices to ensure compliance standards are met.
- Configuration Management for Console User Guide
  Configuration management (SCM) is used to manage security configuration of devices using checklists which includes creating custom checklists, customize individual checks, synchronizing, deploying checklists to devices.
  - Setting up Configuration Management
    Follow these steps to set up your Configuration Management deployment.
  - Using checks and checklists
  - Configuring Windows checklists
  - Configuring UNIX checklists
    You can configure checklists for the superseded and non-superseded UNIX content.
    - Configuring checklists
    - Analyses
    - Using the Create Custom Relevance SCM content wizard
      Follow these steps to incorporate custom checks into an existing SCM custom site.
    - Creating custom UNIX Security Configuration Management content
      Follow these steps to create custom check for UNIX Security Configuration Management.
  - Importing SCAP content
  - Configuration Management Reporting
    In previous releases, the primary reporting tools for the Configuration Management solution included the Configuration Management dashboard, Exception Management dashboard, and Web Reports.
  - Frequently asked questions
- Security Configuration Management for WebUI User Guide
  Security Configuration Management (SCM) App in WebUI continuously assess and manages the device for security misconfiguration and deviation, which enables operator to deploy remediation action to ensure the device meets compliance standards.

Configuring UNIX checklists

You can configure checklists for the superseded and non-superseded UNIX content.

Differences between superseded and non-superseded UNIX content

The Configuration Management UNIX content has superseded and non-superseded versions for every site. In the License Overview dashboard, superseded content have 'Superseded' appended to the site name. For example, the site name for the earlier content for the DISA STIG for Red Hat Enterprise Linux 6 is 'SCM Checklist for DISA STIG on RHEL 6 (superseded)'.

The superseded or earlier content uses client settings for parameter values so you could set different values on different endpoints. The non-superseded or later content has the parameter values scoped to the site's subscription so all endpoints subscribed to that site must use the same parameter values.

Table 1. Comparison between superseded and non-superseded UNIX content
	Superseded or earlier content	Non-superseded or newer content
Setting parameters	Sets different values on different endpoints	Stores parameters on a per-Fixlet basis
	Requires applicability Fixlets which are in the SCM Reporting site. All endpoints must subscribe to the SCM Reporting site.	Requires an applicability Fixlet in the custom site to work with SCA.
Content	Downloads the related scripts	Each Fixlet contains the related shell script
Content	Downloads the related scripts	Placed in different directories
Synchronization	Synchronized in the same way as other sites such as Patch Management sites or the BES Support site	Runs from a custom site and uses the Synchronization wizard