The Site Administrator's public/private key pair is created during the initial HCL BigFix server installation process. The installation wizard prompts the user to create a password for this key. This password protects the private key file (e.g., username.pvk), which is required for the Site Administrator to log in to the console and digitally sign actions and content. This local generation ensures that the private key remains secure and is never transmitted outside the customer's environment.

B. The BigFix License Portal is used to generate the license authorization file (license.crt) and the masthead (actionsite.afxm), not the user-specific private keys for administration.

C. For security reasons, HCL Support never generates or has access to a customer's private keys. These keys are fundamental to the security of the deployment and must be created by the customer.

D. While openssl is a cryptographic tool, the BigFix installer has its own integrated mechanism for generating the required keys. Using a separate command-line tool is not part of the standard installation procedure.

1. HCL BigFix Platform Installation Guide

Version 10.0

"Installing the server on Windows": In the section detailing the installation steps

it states: "In the IEM Site Administrator Private Key Password dialog

enter a password to protect your private key file... The installation program uses this password to create a private key file (username.pvk) that is associated with the user name that you specified." (This describes the key generation as an integral part of the installation wizard).

2. HCL BigFix Platform Installation Guide

Version 10.0

"Installing the server on Linux": The guide describes the ./install.sh script process

which includes the step: "You are prompted to create a site admin key and to provide a password for it. This key is used to authorize all the actions that you will deploy in the future." (This confirms the same key generation process occurs during the Linux installation).

3. HCL BigFix Platform Installation Guide

Version 10.0

"BigFix security": This section explains the Public Key Infrastructure (PKI) used by BigFix

clarifying that the "site-level key file" is created during installation to sign all content published on the site.