Reference: Advanced Configuration menu

The options on the Advanced Configuration menu can have an impact on performance.

Contact Tanium Support before using advanced options.

Change the active partition

This procedure applies only to physical Tanium Appliances and virtual Tanium Appliances.

If you encounter issues during the upgrade process or issues with a recent Tanium server update and you want to revert to the previous version, you can switch to the inactive partition.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 3 to go to the Active Partition menu. ClosedView screen
  5. Follow the prompts to switch to the inactive partition.

Export the RAID controller security key (physical Tanium Appliance only)

The RAID controller security key is used by the controller to lock and unlock access to encryption-capable physical disks. You can export the key and store it in a safe location. During recovery from controller failure, you will need to provide the key. When you run a Health Check, you might see messages alerting you to export the RAID controller security key.

Boot Check: Pass (EFI Boot)
Active partition: pass (VolGroup1-root)

>>> Hardware health (will take 1-12 seconds) <<<
hardware type: pass (TV-220)
RAID controller RAID.Integrated.1-1 Security Key: pass
disk encryption: pass


>>> RAID Controller Security Key <<<

RAID Security key check: fail (key has NOT been exported)  <-------- 

>>> Tanium Application file Permissions <<<

executed checks: 48
failed checks: 4
new health status setting: warning
  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 5 to go to the Export RAID Controller Security Key menu.
  5. Follow the prompts to export the RAID controller security key to the /outgoing directory. ClosedView screen
  6. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change the RAID controller security key (physical Tanium Appliance only)

You can change the RAID controller key in the event of a failure, but you need to have the existing key decrypted to do so.

This is a lengthy process and can take 10 minutes or more to complete.

Before you begin

The passphrase that is associated with the existing key must be decrypted by Tanium. Contact Tanium Support for assistance.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 4 to go to the Change RAID Controller Security Key menu.
  5. Type Yes to proceed, enter your previous decrypted key, and then type in a new key that meets the password policy requirements. ClosedView screen
  6. Export the new RAID controller security key and download the key immediately from the /outgoing folder through SFTP.

    For export steps, see Export the RAID controller security key (physical Tanium Appliance only).

Export the grub key

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu. ClosedView screen
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 6 and follow the prompts to export the grub key to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change the grub key password

If necessary, you can regenerate the grub key and password.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu.
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 7 and follow the prompts to generate a new grub key and export it to the /outgoing folder. ClosedView screen

    For export steps, see Export the grub key.

  5. Use SFTP to copy the file from the /outgoing directory to your local computer.

Change keyboard mapping for virtual console

You can change the keyboard mapping from the current setting to a different layout or reset to the default (us).

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter A to go to the Appliance Configuration menu.
  3. Enter X to go to the Advanced Configuration menu. ClosedView screen
  4. Enter 8 to go to the Set Keymap menu.
  5. Enter 2 to go to a list of available keyboard mappings. Use the spacebar key to page through the list, and then enter the name of the desired mapping. ClosedView screen