Preparing your Device with BigFix

The BigFix security management tool is a small software program that enables the enterprise management of software updates and provides a central mechanism for auditing compliance with School of Medicine policies. This is critical since a wide variety of data is used at the School of Medicine that carry legal requirements for rigorous protections and the consequences of not being able to definitively prove that protections are in place can have severe consequences. In the case of Protected Health Information, for example, HIPAA requires that proof of encryption be provided in the event a computer is lost or stolen. BigFix can provide such proof.

To support the need for auditing and rigorous data management, School of Medicine policy mandates the installation of BigFix on all laptop, desktop computers and VM machines used for Stanford business regardless of whether the computer is used to access Restricted or Prohibited data. This includes both Stanford owned and personally owned computers.

BigFix will have no measurable impact on the performance of your computer.

More information on BigFix can be found at http://patching.stanford.edu/

BigFix must be installed on all laptops and desktops used for Stanford High Risk data. This includes both Stanford-owned and personally-owned computers that may store or access High Risk Data, even if it's just through email. If you use a Stanford or personally owned machine to access the hospitals' Epic and Cerner systems, it is subject to the school's Data Security policy and must have all school-mandated security services. BigFix, however, should not be installed on computers owned by SHC or LPCH.

Uninstalling BigFix (Mac)

1. Download the BigFix installer by going to: https://med.stanford.edu/datasecurity/bigfix.html

2. Open the Installer file and you will be given the option of AgentUninstaller and BigFix_Mac.pkg

3. Select "AgentUninstaller" and click to "Open"

4. You will be prompted to verify that you wantto uninstall BigFix. Click "Ok" to begin the uninstallation process.

5. You wil see a dialogue box stating that the uninstlaler files wants to make changes. Enter your admin password and click "Ok"

6. When the process completes, restart the computer.

Removing BigFix (Windows)

1. Open Add and Remove Programs by clicking the Start button and typing “Add and Remove Programs.”

2. Located the program called “Tivoli Endpoint Manager Client;" this is the same as BigFix. Click on the program and select “Uninstall.”

3. You will be asked to verify that you want to uninstall the Tivoli Endpoint Manager Client. Click "yes" to begin the uninstall process.

4. When the process completes, restart the computer.

Yes. The Data Security policy mandates that all computers used for Stanford business, including VM machines, run the BigFix management software. If the host machine is used to work with High Risk data (previously Restricted or Prohibited Data), it must have enterprise backup and encryption software installed, and any associated VM machine will by definition be compliant. You will be sent a survey through the BigFix software asking you to identify the host machine and its compliance status.

The BigFix device dashboard provides you up-to-date information on a given computer and its compliance status, including BigFix registration, and backup and encrpyption completion. For information on the compliance status of all of your devices, see the AMIE tool at https://med.stanford.edu/datasecurity/amie/

The BigFix dashboard also gives you access to the Data & Device Attestation and the Device Identification Survey for that particular machine, should you wish to change your answers.

You can open the BigFix device dashboard by clicking the BigFix icon on your machine. NOTE: When you first install BigFix, the BigFix icon will take an hour or two to appear (of your computer being up and online).

On Windows, the icon will appear in
the Windows task tray.

On Mac, the icon will appear in the top nav bar.

 

BigFix is used to report basic system information such as operating system version, amount of memory, software applications installed and security patches applied. We have also added some SoM specific properties around backup status, encryption status, and information that you have provided though BigFix-generated surveys.

For a full list of standard properties retreived by BigFix, see: https://itservices.stanford.edu/service/bigfix/retrieved_properties

No. BigFix has no measurable impact on computer performance.

BigFix runs on all Windows and Macintosh computers running an OS from the past 5 years (and maybe more).

Computers which are too old to comply should be replaced with modern, securable, and supportable equipment. If you have an older computer which CANNOT be replaced (i.e.: it's hooked up to an expensive piece of equipment, which can only be run from an older computer), then contact IRT to work through the exception process.

Yes, if you access or store Stanford High Risk data on it (run an email application, download email attachments, etc.). Any personally owned machine used to access the hospitals' Epic and Cerner systems is also subject to the school’s Data Security policy and must have BigFix and all other school-mandated security services.

A personally owned computer does not need to run BigFix if you ONLY use the computer remotely (not on campus) AND if you do not ever access High Risk data.

Not directly. Once BigFix has been installed, your computer will become part of the set of devices managed by the School of Medicine's IT staff.

The BigFix program will be used to identify the specific computer(s) you use and your preferred deployment option for installing the required backup and encryption services to your computer(s).

Yes. BigFix is licensed for use by Stanford affiliates, and it permits Stanford IT staff to centrally manage your computer. When your Stanford affiliation ends, it would be appropriate to uninstall BigFix. For assistance removing BigFix, please submit a Help Ticket.

For assistance removing BigFIx, please submit a Help Ticket.