IBM BigFix IBM Installation Guide Version 9.5 IBM BigFix IBM Installation Guide Version 9.5 Note Before using this information and the product it supports, read the information in “Notices” on page 349. This edition applies to version 9, release 5, modification level 11 of IBM BigFix and to all subsequent releases and modifications until otherwise indicated in new editions. © Copyright IBM Corporation 2010, 2018. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. © HCL Technologies Limited 2018 Contents Chapter 1. Introduction ........ 1 A typical installation .......... 57 What is new in V9.5 ............ 1 A multiple server installation ....... 57 Service Management Connect ........ 11 Moving from evaluation installation to production Terms used in this guide .......... 11 installation .............. 58 Architectural components overview ...... 11 Chapter 7. Managing licenses ..... 61 Chapter 2. BigFix Platform Unicode Creating the License Authorization File ..... 62 Support Overview .......... 13 Licensing Assistance ........... 63 Masthead encoding parameters ........ 13 Extending the license entitlements ....... 63 Top-down data flow: from the BigFix server to the Distributing the Updated License and Masthead .. 64 clients ................ 14 Distributing the masthead from the Windows Bottom-up data flow: from BigFix clients to BigFix server to clients ............ 65 server ................ 14 Distributing the masthead from the Linux server Unicode support requirements and limitations... 15 to the clients ............. 67 Reading and writing files in the specific encodings 18 Background information ......... 18 Chapter 8. Before installing ...... 69 Reading file inspectors ......... 18 Configuring a Local Firewall ........ 69 Writing file with the encode command .... 19 Modifying port numbers .......... 69 Reading and writing files with encode .... 20 Managing actions on clients with different local Chapter 9. Installing on Windows encoding ............... 21 systems .............. 71 Installation Steps ............ 71 Chapter 3. Sample deployment Step 1 - Downloading BigFix ....... 71 scenarios ............. 23 Step 2 - Requesting a license certificate and Basic deployment ............ 24 creating the masthead .......... 72 Main Office with Fast-WAN Satellites...... 25 Step 3 - Installing the components ...... 79 Disaster Server Architecture ......... 27 Removing the Product Components on Windows Efficient relay setup ........... 28 systems ............... 170 Hub and spoke ............. 29 Uninstalling a Windows replication server.... 171 Remote Citrix / Terminal Services Configuration .. 31 Chapter 10. Installing on Linux Chapter 4. Assumptions and systems.............. 173 requirements ............ 35 Installing and configuring DB2 ....... 173 Assumptions .............. 35 Installation Steps ............ 175 Server requirements ........... 36 Step 1 - Downloading IBM BigFix ..... 175 Console requirements ........... 37 Step 2 - Installing the Server ....... 176 Client requirements............ 37 (Optional) - Installing Web Reports Standalone 184 Database requirements........... 38 (Optional) - Installing the WebUI Standalone 187 Security requirements ........... 39 Step 3 - Verifying Server Installation..... 188 Network configuration requirements ...... 40 Installation Command Options ....... 189 Silent installation ............ 189 Chapter 5. Security Configuration Installation Folder Structure ........ 196 Scenarios ............. 43 Configuration, Masthead, and Log Files .... 198 Managing the BigFix Services ........ 199 On Windows Systems ........... 43 Changing the database password ....... 199 On Linux Systems ............ 45 Changing the DB2 port .......... 200 Authenticating Additional Servers (DSA) .... 200 Chapter 6. Types of installation .... 47 Using DB2 Authentication ........ 201 Evaluation installation ........... 47 Installing Additional Linux Servers (DSA) .... 201 Downloading the correct SQL Server installer ... 48 Understanding the server components ..... 202 Performing an evaluation installation on Windows 50 Installing the Console .......... 203 Performing an evaluation installation on Linux .. 53 Installing the clients ........... 204 Production installation........... 54 Using the Client Deploy Tool ....... 204 A basic installation ........... 56 Installing the Client Manually ....... 215 © Copyright IBM Corp. 2010, 2018 iii Using Software Distribution Tools ..... 225 Creating the BigFix Virtual Relay template .. 281 Using Group Policies .......... 225 Phase 3 – Configuring the BigFix Virtual Relay Using Login Scripts .......... 225 instance ............... 281 Using email ............. 226 Deploying a new BigFix Virtual Relay instance Embedding in a Common Build ...... 226 by using Auto-Deployment........ 282 Enabling encryption on Clients ...... 227 Manually deploying a new BigFix Virtual Relay Running the BigFix Administration Tool .... 228 instance .............. 283 Logging Cleanup Tasks Activities...... 240 Maintenance.............. 285 Working with TLS cipher lists ........ 241 Troubleshooting ............ 287 Removing the Product Components on Linux Limitations .............. 287 systems ............... 242 VMware and Open VM tools ........ 287 Uninstalling a Linux replication server ..... 243 Auto-Deployment ............ 288 Modifying the Virtual Relay template ..... 288 Chapter 11. Post-installation configuration steps ......... 245 Chapter 14. Setting up a proxy Post-installation steps .......... 245 connection ............ 291 Starting and stopping the BigFix server..... 248 Enabling client polling .......... 293 Subscribing to content sites......... 248 Connecting the console to the server through a proxy ................ 293 Chapter 12. Managing relays ..... 251 Setting a proxy connection on the server .... 294 Relay requirements and recommendations.... 251 Setting up a proxy connection on a relay .... 297 Setting up a relay ............ 252 Setting up a proxy connection on a client .... 299 Installing and upgrading a relay from the Best practices to consider when defining a proxy command line ............. 252 connection .............. 301 Assigning relays to clients ......... 253 Troubleshooting proxy connection ...... 302 Assigning relay at client installation time ... 253 Error Unable to get site content (failed to Manually assigning relays to existing clients .. 256 pass sha1 hash value checks in BESRelay.log . 302 Automatically assigning relays at client Error Unexpected HTTP response: 503 Service installation time ........... 256 Unavailable in GatherDB.log ....... 303 Automatically assigning relays to existing clients 257 How to check if the proxy configuration is Using relay affiliation ......... 257 correct............... 303 Notes about automatic relay assignment ... 258 New site version cannot be gathered .... 304 Adjusting the BigFix Server and Relays..... 259 Dynamic throttling ........... 260 Chapter 15. Running backup and Assigning a relay when the server is unreachable 261 restore .............. 305 Setting internet relays ......... 261 On Windows systems .......... 305 Client Authentication........... 264 Server Backup ............ 305 Authenticating relays.......... 265 Server Recovery ........... 306 Handling the key exchange........ 265 Verifying restore results ......... 307 Manual key exchange ......... 265 DSA Recovery ............ 307 Revoking Client Certificates ....... 266 On Linux systems ............ 309 Re-registering a revoked client ...... 266 Server Backup ............ 309 Mailboxing ............. 267 Server Recovery ........... 310 Viewing which relay is assigned to a client ... 268 Verifying restore results ......... 311 Enabling the DB2 database online backup ... 311 Chapter 13. Introduction to Tiny Core DSA Recovery ............ 312 Linux - BigFix Virtual Relay ..... 269 Architectural overview .......... 269 Chapter 16. Upgrading on Windows Phase 1 – Configuring the Tiny Core Linux virtual systems.............. 315 machine ............... 270 BigFix client backward compatibility ..... 315 Downloading the ISO image ....... 270 Upgrade paths to V9.5 .......... 316 Creating a virtual machine ........ 270 Before upgrading ............ 317 Installing Tiny Core Linux on the virtual Upgrade prerequisite checks ........ 318 machine .............. 271 Manual upgrade ............ 319 Phase 2 – Preparing the BigFix Virtual Relay Upgrading the installation generator .... 319 template ............... 275 Upgrading the server.......... 319 Template setup and customization from a local Upgrading the Console ......... 321 folder ............... 276 Upgrading the WebUI ......... 321 Template setup and customization from the Upgrading the relays .......... 321 network .............. 278 Upgrading the clients ......... 321 iv IBM BigFix: Installation Guide Upgrading the Web Reports ....... 321 B ................. 335 Rollback ............... 322 C ................. 336 D ................. 337 Chapter 17. Upgrading on Linux E ................. 338 systems.............. 323 F ................. 338 G ................. 338 BigFix client backward compatibility ..... 323 L ................. 338 Upgrade paths to V9.5 .......... 324 M ................. 338 Automatic databases backup upon upgrade ... 324 N ................. 339 Troubleshooting the automatic databases backup O ................. 339 feature .............. 325 P ................. 339 Disabling the automatic databases backup R ................