Configure API users

Depending on the products currently configured in the environment, follow the below guidelines to configure the API users and assign them the required roles.

Note

Consider the user accounts to be non-personal service accounts rather than personal accounts. This is especially important in a single sign-on environment.

BigFix Inventory/ILMT

Create a user and give access to BigFix Inventory/ILMT.

  1. Log in to the BigFix Inventory/ILMT web interface using Administrator credentials.

  2. In the top navigation, select Management and then select Users.

  3. To create a new user, select New.

  4. Enter the name of the user and assign the Software Asset Managers role to it.

  5. For Computer Group, select All computers.

  6. For Authentication Method, select Password.

  7. Enter and confirm a Password for the new user.

  8. Select Create.

BigFix Server (Console)

Create an operator and give access to BigFix Server (Console).

  1. Log in to the BigFix Server (Console) using Administrator credentials.

  2. Switch to BigFix Management.

  3. Select Operators.

  4. Select Tools, and then select Create Operator.

    The Add User dialog box appears.

  5. Enter a Username for the new user.

  6. Enter and confirm a Password for the new user.

  7. Select OK.

    The Console Operator window opens.

  8. Select the Details tab, and then do the following:

    1. In the Overview section, select the Always allow this user to login option.

    2. In the Permissions section, set Can Submit Queries to Yes.

    3. In the Interface Login Privileges section, set Can use REST API to Yes.

  9. Select the Computer Assignments tab, and then select All computers.

  10. Save the changes.

Detailed Hardware Information

The HCL BigFix Inventory connector fetches detailed hardware data (detailed OS and SMBIOS data) if the following conditions are met:

  • BigFix Inventory needs to be updated to 9.2.12 (or later)

  • In the BigFix Console, Collect Detailed Hardware Information scan needs to be run so that the detailed hardware data is collected.

  • In the BigFix Console, Detailed Hardware Information analysis needs to be enabled.

Configuration steps:

  1. In the BigFix console, navigate to Sites > External Sites > IBM BigFix Inventory v9 > Fixlets and Tasks.

  2. Select Collect Detailed Hardware Information task.

  3. Select Take Action.

  4. In the window that pops up and in the Target tab, select the computers for which you want to collect the detailed hardware information.

  5. Optionally, in the same window in the Execution tab, customize the frequency of the scan. By default, the scan runs every 7 days.

  6. Select OK.

  7. Navigate to Sites > External Sites > IBM BigFix Inventory v9 > Analysis.

  8. Select Detailed Hardware Information analysis and activate it. This will populate BigFix with the scan results.

  9. Wait for the scheduled data import or run it manually. This can be done from BigFix Inventory > Management > Data Imports.

More info about the collection of detailed hardware data is available at: https://help.hcltechsw.com/bigfix/9.5/inventory/Inventory/planinconf/t_collecting_detailed_hw_info.html

Windows Raw File Information

The HCL BigFix Inventory connector fetches raw scanned file data for Windows devices if the following conditions are met:

  • BigFix Inventory is updated to 10.0.1.0, or later.

  • Scanner is updated to version 9.2.19.100, or later.

  • Software scan is initiated from the updated fixlet with version 10.0.1.0, or later.

Configuration steps:

  1. In the BigFix console, navigate to Sites > External Sites > IBM BigFix Inventory v9 > Fixlets and Tasks.

  2. Select Configure Collection of Additional Properties of Windows Executables task.

  3. Enable Collect Additional Properties of Windows Executables checkbox.

  4. Select Take Action.

  5. In the window that pops up and in the Target tab, select the computers for which you want to enable collection of additional properties of Windows executable files.

  6. Select OK.

  7. Restart the Software scan from the 10.0.1.0 (or later) version of fixlet.

  8. Wait for the scheduled data import or run it manually. This can be done from BigFix Inventory > Management > Data Imports.

More information about the collection of additional properties for Windows executables is available at: https://help.hcltechsw.com/bigfix/10.0/inventory/Inventory/integration/r_enabling_collection_additional_properties.html

Important note from the link above: collection of additional properties must not be enabled for more than 50000 endpoints (devices).