The license.pvk file is the site-level private key for the entire HCL BigFix deployment, created during the initial server installation. This key is used to digitally sign and authorize all content published to the environment. The first user created during this process is the "Site Administrator." This specific user account is granted the authority to use the site-level key. Therefore, when the Site Administrator logs into the console, they are authenticated by providing the password associated with the license.pvk file.

B. All BigFix local operators: Each new local operator created after the initial installation receives their own unique private key file (e.g., operatorname.pvk), not the site-level license.pvk.

C. All BigFix Master Operators: While the Site Administrator is a Master Operator, any subsequent Master Operators created are issued their own unique private key files for authentication.

D. All BigFix LDAP operators: LDAP operators authenticate against an external directory service (e.g., Active Directory) using their domain credentials and do not use BigFix-generated private key files.

1. HCL BigFix Platform 10.0 Installation Guide: In the section "Installation on Windows > Running the installation

" the guide states

"The private key file

license.pvk

is used to authorize the publication of content into the system. You are also prompted to create the first BigFix user

the site administrator. This user is granted the authority to use the site-level key." This directly links the license.pvk to the Site Administrator.

2. HCL BigFix Platform 10.0 Administration Guide: In the chapter "Managing operators

" the section on "Creating a new operator" explains that for new local operators

"A private key file is created for the new operator. You must provide the new operator with this file and the password that you specified." This confirms that other operators do not use the license.pvk.

3. HCL BigFix Platform 10.0 Administration Guide: The section "LDAP Authentication" details the process for configuring LDAP operators

noting that they "can log in to the BigFix console by using their LDAP credentials." This explicitly excludes the use of .pvk files for this user type.