Table of Contents
Is Berkeley Security Software (BSS) the same as the Berkeley Desktop?
No. The Berkeley Desktop is a service offered by IT Client Services (ITCS) to manage computers and improve user experience. It uses BigFix to ensure staff and affiliates can access important tools easily.
The Berkeley Security Software (BSS) is a security "bundle" that combines two essential components:
- BigFix: Provides asset identification and manages system vulnerabilities.
- Endpoint Detection and Response (EDR): Provides faster security response during malicious activity.
BigFix is used to install EDR on computers that are not already managed by the central Berkeley Desktop service (e.g., those managed by departmental IT or individual users).
Compliance Enforcement: The campus is exploring measures that will involve restricting access to specific applications on devices that do not meet cybersecurity standards, including the installation of BSS. This rollout is gradual to allow departments time to budget for necessary hardware updates.
Device Compatibility
Supported Devices (BSS Required)
- University-owned laptops, desktops, and servers.
- Devices used for Administration, Instruction, and Research.
- Operating Systems: macOS, Windows, and some Linux distributions.
Unsupported Devices
- Personally owned computers (including Graduate Student Academic Employees using personal equipment).
- Mobile devices (phones, tablets, e-readers).
- IoT devices (cameras, sensors, routers, appliances).
- ChromeOS (Chromebooks).
- Computers with approved exceptions. Review KB0015376 - EDR Exclusion Request process before applying.
Installation and Support
Installation Time: Timing varies based on operating system and hardware age. If you have performance concerns, we recommend running the installer at the end of the day when the system is not in active use.
How to Get Help: For assistance with the installer, contact the IT Help Desk or refer to KB0014900 - BSS Installation Support.
Common Error Messages
- "Unknown Publisher" (Windows): Windows may decline the installation because it is reported as improperly signed. This is a known bug. To proceed: Click "More Info" in the blue Windows SmartScreen window, then select "Run Anyway."
- "Background Service Installed" (macOS): This is an expected and legitimate notice indicating that the security agent has started.
Personally Owned Devices
DO NOT install BSS on personally owned computers.
This software is designed for enterprise environments and can lead to unwanted monitoring of your personal files, apps, and activities. Personally owned computers are unsuitable for handling sensitive institutional information. Standard antivirus programs are sufficient for personal use.
Privacy and Data Protection
The university prioritizes privacy and data protection. The EDR program is governed by the Information Risk Governance Committee (IRGC) under the Electronic Communications Policy (ECP).
For more details, see the ISO Privacy and Process Documentation and the UCOP Town Hall recording (Internal Use Only).