Reference: Advanced Operations menu

Use the Advanced Operations menu to make additional changes that might be required in atypical environments.

Contact Tanium Support before you change advanced options.

Authentication service

The Tanium Appliance includes a local authentication service that can be used for Tanium Console user authentication. You can create and delete users and manage their passwords.

In addition, you can configure Tanium Console authentication against your enterprise LDAP server. For details on using LDAP, see the Tanium Console User Guide: Using LDAP.

Enable UseTBBAllocatorStats

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 2 and follow the prompts to enable UseTBBAllocatorStats. ClosedView screen

Generate a new tanium.pub/tanium.pvk pair

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 3 and follow the prompts to generate a new Tanium Server public-private key pair. ClosedView screen

Upload an HTML banner

You can add a page to provide information or warnings to users before they sign in to the Tanium Console. For complete details, see Tanium Console User Guide: Customizing the Console and Interact. You can use the TanOS Advanced Operations menu to upload the banner.html file.

  1. Use SFTP to upload the HTML banner file to the /incoming folder.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 4 and follow the prompts to copy the HTML banner file to the appropriate location.

Generate TLS reporting certificates and keys (7.2 and later)

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Use the menu to generate the certificate and key files used in TLS communication:
    • Zone Server (not yet implemented). Enter 5 and follow the prompts to generate the reporting.csr file and key files used in TLS communication from the Tanium Client to the Zone Server. You must copy the CSR file to the Tanium Server appliance so a certificate can be issued and signed by the Tanium Server public key; and then you must copy the resulting reporting.crt file back to the Zone Server.
    • Tanium Server. Enter 6 and follow the prompts to generate the certificate file and key files used in TLS communication from the Tanium Client to the Tanium Server. All of the necessary certificates and keys were generated when you installed the Tanium Server role. Use this menu only if the Tanium Server public key file is changed.