[BESAdmin-Announcements] Important BigFix WebUI update - RHEL 7 and Windows 2012/R2 to no longer be available as WebUI operating systems

Fri Apr 7 05:07:30 PDT 2023

An upcoming release of BigFix WebUI will no longer function on RHEL 7 and Windows Server 2012 and 2012 R2 (WebUI Server component).
The Node.js library that the WebUI server leverages is being upgraded to stay current with support and security vulnerabilities. Current outlook for the delivery of this update is beginning of May 2023.
As a result, any BigFix WebUI server component installed on RHEL 7 and Windows Server 2012 and 2012 R2 operating systems will stop working after gathering the WebUI sites update. This will happen automatically when the new sites are released, unless automatic updates have been disabled.

This will affect you if the computer hosting the BigFix WebUI server runs on the above mentioned operating systems, regardless if it is the same computer hosting BES Root Server, or a different computer.
The above applies to both BigFix 9.5 and BigFix 10.0 deployments.

My BigFix WebUI is already running on Windows 2016 or RHEL 8 greater:

No action needed. Enjoy the upcoming security improvement.

My BigFix WebUI is running on Windows Server 2012, Windows Server 2012 R2 or RHEL 7 and I can upgrade before April 30, 2023:

To address this situation, the WebUI Server must be moved to a computer running a newer operating system: RHEL 8 if your BigFix deployment is on RHEL; Windows Server  2016, 2019 or 2022 if your BigFix deployment is on Windows.
In order to do so, we are here providing a list of steps to be followed:

  *   Prepare a computer with one of the operating systems listed above, to be destination of the new WebUI Server installation, with BigFix agent installed, matching requirements described here (version 9.5):
Hardware Requirements (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_hardware_requirements.html>
Deployment Requirements (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_deployment_requirements.html>
or (version 10.0):
Hardware Requirements (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_hardware_requirements.html>
Deployment Requirements (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_deployment_requirements.html>

  *   Uninstall the current WebUI Server component by running the Fixlet 2557 - Remove WebUI Service in BES Support site
  *   Using BigFix Console, identify the computer from which WebUI has been uninstalled, and retrieve any WebUI settings still stored in Computer Settings, as described here (version 9.5):
Access WebUI Server Settings (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_access_webui_server_settings.html>
or here (version 10.0):
Access WebUI Server Settings (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_access_webui_server_settings.html>

  *   The WebUI settings are the ones starting with _WebUI. Take note of the settings and remove them.
  *   Create the same Computer Settings from the point above on the computer chosen to be the new destination of the WebUI Server
  *   If you are installing the WebUI on a remote server and configuring WebUI to work with SAML, set the _WebUI_AppServer_Hostname key on the BigFix Root Server computer to the host name of the computer where the WebUI is being installed.
  *   Install WebUI Server on the new computer by running the fixlet “Install BigFix WebUI Service (version 9.5.x)” or the fixlet “Install BigFix WebUI Service (version 10.0.x)”, based on the version of your BigFix deployment. See here for more detail on installation procedure (version 9.5):
Installation Procedure (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_before_running_fixlet_2556___i.html>
or (version 10.0):
Installation Procedure (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_before_running_fixlet_2556___i.html>

  *   Apply, if needed, certificates from a Certificate Authority. For more detail see here (version 9.5):
Configure SSL certificates (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_ssl_cert_configuration.html>
or here (version 10.0):
Configure SSL certificates (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_ssl_cert_configuration.html>

  *   Note: The installation task only installs the WebUI service, which will then automatically install and configure the rest of the WebUI. After this task is completed, you need to wait for the WebUI service to complete several post-installation operations before you can actually use the WebUI.

My BigFix WebUI is running on Windows Server 2012, Windows Server 20212 R2 or RHEL 7 and I cannot upgrade by April 30, 2023:

In case you are unable to complete the steps above by 04/30, to allow WebUI to temporarily continue to work after that date, and only until the process is completed, you can disable WebUI automatic updates. In order to do so, you have to:

  *   Ensure BigFix Root Server is at version 9.5.17 or later, or version 10.0.2 or later
  *   Ensure Automatic Updates for WebUI are disabled, as described here (version 9.5):
Managing Application Updates (hcltechsw.com)<https://help.hcltechsw.com/bigfix/9.5/webui/WebUI/Admin_Guide/c_manage_application_updates.html>
or here (version 10.0):
Managing Application Updates (hcltechsw.com)<https://help.hcltechsw.com/bigfix/10.0/webui/WebUI/Admin_Guide/c_manage_application_updates.html>

The BigFix WebUI team

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20230407/10aa57d2/attachment.html>