BigFix and Jamf Privacy Protections and Inventory Collection

UC Berkeley IT uses BigFix and Jamf for managing and securing campus computers, specifically: configuration management, assuring secure configurations, ensuring security by assuring patch compliance, providing source data for security investigations, inventory management, delivery of applications, and system details to enable desktop support. Any uses beyond this list must be reviewed and approved through the campus Privacy Balancing process.

UC Berkeley respects your privacy and confidentiality. BigFix and Jamf retrieve user account data from your computer, which is often but not always your CalNet ID. These applications do not collect any personal or sensitive information (browser history, emails, saved passwords, calendar events, contacts, etc).

BigFix and Jamf retrieve properties (data) that are essential to managing and securing your campus computer. The data collected is only available to UC Berkeley employees who have agreed to abide by all of the UC acceptable use and data access policies, including the University of California Electronic Communications Policy (ECP). Access to the data is contingent on both manager and Berkeley IT approvals and is restricted to the minimum scope that is necessary for that specific employee or system. The following table includes some but not all of the data retrieved by BigFix and Jamf.

Property	Information Retrieved
Hardware and Software
Computer Name	The name of your computer.
BIOS	The vendor, version and/or date of your computer's BIOS.
Computer Model	Your computer's model name as provided by the vendor; also indicates whether your computer is a "laptop," "workstation," or "server" (that is, running one of the server editions of Windows).
CPU	The type (vendor/model) and speed of your computer's central processor.
CPU Architecture	The architecture of your computer's central processor, such as Intel or ARM.
Free Space on System Drive	The size of and amount of free space available on your computer's boot volume (typically drive C).
Free and Total Space of Drives	The size of and amount of free space available on all of your computer's fixed physical and logical drives.
RAM	The amount of RAM (random access memory) installed in your computer.
Serial Number	Your computer's serial number as provided by the vendor.
Applications Installed	The applications that are currently installed on your computer.
Application Versions	The versions of the applications that are currently installed on your computer.
Operating System
Blank Password Exists	Checks for blank passwords for all local user accounts on your computer. Only the account names without associated passwords are retrieved; any of these accounts that are disabled or have administrator rights are labeled as such.
Boot Time of OS	The date and time at which your computer was last started.
LM Compatibility Level	The level of security required for authentication between your computer and a remote computer.
Installed OS Type	The type of operating system installed - 32bit or 64bit
Installed OS and Service Pack	The version of the operating system installed on your computer, including its Service Pack level.
Installed OS Language	The localized version of Windows installed on your computer.
Uptime	The amount of time that your system has been running since the last boot or restart
Administrator Accounts and Groups	The user accounts and groups on your computer that have administrator access
User Name	The currently logged-on user's account name.
Client last login timestamp	The timestamp of when the last user was logged in to the computer.
Client logon history	The logon history of user accounts that have logged on to the computer.
Automatic Update	Indicates whether the Windows or macOS Automatic Update service is running on your computer, in what mode it is running, and if running on a schedule, the day and time at which the service checks for updates.
Services and Processes	The services and processes that are running on your computer.
Local Time Zone	The local time zone set in your computer
Registry Key Values	Only for Windows, the values of specific registry keys
Computer Security
Encryption Status	The status of your computer's encryption, whether it is encrypted or not encrypted
Encrypted Drives	The encryption status of which hard drives connected to your computer are encrypted or not
FileVault Recovery Key	Only for macOS and Jamf, if you used the Self Service Offer to enable FileVault encryption on your Mac, then your recovery key is encrypted and stored in Jamf's inventory
EDR Trellix Installed	Checks if the EDR Trellix agent is installed on your computer
EDR Trellix Agent ID	Checks what the Agent ID is of the installed EDR Trellix agent
Windows Defender	Only for Windows and BigFix, checks Windows Defender settings like the status, scan settings, signatures, etc.
macOS Security Features Status	Only for macOS, checks the status of built-in macOS security features such as System Integrity Protection, Gatekeeper, XProtect, Secure Token, and Bootstrap Token
OS Updates and Patching Status	The status of the operating system updates and if the OS is fully patched.
Application Updates and Patching Status	The status of supported application updates and if the application is fully patched.
BigFix Information
BES Client Version	The version number of the BigFix client installed on your computer.
BES Relay Version	The version number of the BigFix relay service (if any) installed on your computer.
BigFix Relay Selection Method	Indicates the selection method ("automatic" or "manual") your BigFix client will use in order to locate BigFix relays.
BigFix Relay Service Installed	Indicates whether your computer has been configured by an administrator to function as a BigFix relay. This would never be done without your knowledge.
Client Administrators	The list of BigFix administrators who can manage your computer.
Client Settings	The list of all BigFix client settings on your computer.
Last Report Time	The time at which the BigFix client on your computer last communicated with the BigFix server.
Locked	Indicates whether your computer has been "locked," so that the BigFix server cannot take any actions on it.
Lock Expiration	The time (if any) at which the "locked" status of your computer will expire.
Relay	The DNS name of the BigFix relay your client is currently using.
Subscription Time	The time and date when the BigFix client on your computer first communicated with the BigFix server.
Network
Active Directory Path	Your computer's location (if any) in a Windows Active Directory domain.
Computer Description	The value entered in your computer's "Computer Description" field.
Computer Name	Your computer's "computer" (or "NetBIOS") name as it appears in the System Properties control panel (Windows) or System Preferences Sharing preference pane (Mac).
DNS Name	Your computer's local computer name or registered host name followed by its current IP (Internet) domain as assigned by your Internet Service Provider.
Domain/Workgroup	The Windows NT domain or workgroup to which your PC belongs (if any).
Client IP Addresses	Your computer's current IP (Internet) addresses as assigned by your Internet Service Provider.
MAC Addresses	The hardware addresses of your computer's network interface cards.
Connected File Servers	The file servers that are currently mapped to your computer.