Reference: Advanced Configuration menu

The options on the Advanced Configuration menu can have an impact on performance.

Contact Tanium Support before using advanced options.

Enable automatic destruction of the TanOS installation

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 1 and follow the prompts to enable self-destruction. ClosedView screen

View the TanOS log

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu.
  3. Enter X to go to the Advanced Configuration menu.
  4. Enter 2 to view the TanOS log.
  5. Type q to exit the log.

Change the active partition

This procedure applies only to Tanium Physical Appliances and Tanium Virtual Appliances.

If you encounter issues during the upgrade process or issues with a recent Tanium server update and you want to revert to the previous version, you can switch to the inactive partition.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 3 to go to the Active Partition menu. ClosedView screen
  5. Follow the prompts to switch to the inactive partition.

Export the RAID controller key (Physical Appliance only)

The RAID controller security key is used by the controller to lock and unlock access to encryption-capable physical disks. You can export the key and store it in a safe location. During recovery from controller failure, you will need to provide the key. When you run a Health Check, you might see messages alerting you to export the RAID controller security key.

Boot Check: Pass (EFI Boot)
Active partition: pass (VolGroup1-root)

>>> Hardware health (will take 1-12 seconds) <<<
hardware type: pass (TV-220)
RAID controller RAID.Integrated.1-1 Security Key: pass
disk encryption: pass


>>> RAID Controller Security Key <<<

RAID Security key check: fail (key has NOT been exported)  <-------- 

>>> Tanium Application file Permissions <<<

executed checks: 48
failed checks: 4
new health status setting: warning
  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 5 to go to the Export Security Key menu.
  5. Follow the prompts to export the RAID controller security key to the /outgoing directory. ClosedView screen
  6. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change the RAID controller key (Physical appliance only)

You can change the RAID controller key in the event of a failure, but you need to have the existing key decrypted to do so.

This is a lengthy process and can take 10 minutes or more to complete.

Before you begin

The passphrase that is associated with the existing key must be decrypted by Tanium. See Contact Tanium Support.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 4 to go to the Change Security Key menu.
  5. Type Yes to proceed, enter your previous decrypted key, and then type in a new key that meets the password policy requirements. ClosedView screen
  6. Export the new RAID key and download the key immediately from the /outgoing folder through SFTP.

    For export steps, see Export the RAID controller key (Physical Appliance only).

Export the grub key

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 6 and follow the prompts to export the grub key to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change the grub key password

If necessary, you can regenerate the grub key and password.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu.
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 7 and follow the prompts to generate a new grub key and export it to the /outgoing folder. ClosedView screen

    For export steps, see Export the grub key.

  5. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change keyboard mapping for virtual console

You can change the keyboard mapping from the current setting to a different layout or reset to the default (us).

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu.
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 8 to go to the Set Keymap menu.
  5. Enter 2 to go to a list of available keyboard mappings. Use the spacebar key to page through the list, and then enter the name of the desired mapping. ClosedView screen