BigFix platform 10.0.8 - Client registration issue

[adinia]

A problem has been reported with BigFix 10.0.8; this prevents agents connected directly to the BigFix root server from registering and communicating properly, under certain specific conditions. The problem does not affect agents connecting through relays distinct from the BigFix root server.

The problem happens if all the following conditions are met:

• BigFix root server at version 10.0.8.37
• REST API working on default port 52311
• REST API configured to use HTTPS
• REST API HTTPS configured to use custom certificates
• Masthead parameter “x-bes-minimum-supported-relay-level” set to “9.5.6”

Also, with the BigFix root server at 10.0.8.37, HTTPS requests to BigFix WebReports and to BigFix Server done using a browser that has one or more client certificates installed will display a pop-up window presenting the list of the certificates available on the machine. The operator can press “Cancel” on this popup. No functionality is compromised by this.

The BigFix team is working on the problem with highest focus, and will provide recommendations to both customers who already upgraded to 10.0.8, and customers who plan to do so.
Please also refer to open defect articles

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102545
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102676

and forum posts

Client on BES Root server can't connect after upgrade to 10.0.8

I upgraded from 10.0.7 to 10.0.8 earlier today, and ever since the BES Client on the BES Root server itself isn’t able to connect to the local relay that runs on that server. It tries to connect with SSL but fails and falls back to HTTP. The log shows: RegisterOnce: Attempting secure registration with 'https://127.0.0.1:52311/cgi-bin/bfenterprise/clientregister.exe?RequestType=RegisterMe60&ClientVersion=10.0.8.37&...' RegisterOnce: Relay does not support secure registration. RegisterOnce: Re…

BigFix WebReports prompts for PIV Card authentication after Upgrading to 10.0.8

Hello, After upgrading BigFix to 10.0.8 in our dev environment, when I go to webreports, it’s asking me to authenticate with a PIV card. If click on cancel, it takes me to the username/password fields. When I do the same steps for our production environment, it doesn’t do that as it’s still on 10.0.7. Is this expected behavior with the new upgrade going forward? Justin

for additional information.

Alessandro Dinia - BigFix Product Manager

[adinia]

The two Defect Articles have been updated with temporary workarounds to mitigate the issues.BigFix team is working to provide a hot fix via support ticket for those customers who cannot apply the workarounds. We will keep you informed as soon as new info is available.

[mikelbeck]

Any ETA on the fix for these issues?

[adinia]

A hotfix for the two reported problems will be available, via support ticket, by Friday, Feb 3rd, EoB.

[mikelbeck]

FYI, the hotfix corrected the issues we were having.

[adinia]

The issues will be addressed in next platform fixpack, 10.0.9.
We expect to be able to deliver 10.0.9 within the month of March 2023.