Reference: Advanced Operations menu

Use the Advanced Operations menu to make additional changes that might be required in atypical environments.

Consult with Tanium Support before you change advanced options. For more information, see Contact Tanium Support.

Import an authentication plugin configuration file

The Tanium Appliance includes a local authentication service that can be used for Tanium Console user authentication. You can create and delete users and manage their passwords.

In addition, you can configure Tanium Console authentication against your enterprise LDAP server. For details on using LDAP, see the Tanium Console User Guide: Using LDAP.

The Tanium Appliance also supports a pluggable authentication module for many commonly used authentication methods. For details, contact Tanium Support.

Enable UseTBBAllocatorStats

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 2 and follow the prompts to enable UseTBBAllocatorStats. ClosedView screen

Generate a new tanium.pub/tanium.pvk pair

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 3 and follow the prompts to generate a new Tanium Server public-private key pair. ClosedView screen

Upload an HTML banner

You can add a page to provide information or warnings to users before they sign into the Tanium Console. For complete details, see the Tanium Support Knowledge Base: Adding a pre-signin page to the Tanium Console (sign-in required). You can use the TanOS Advanced Operations menu to upload the banner.html file.

  1. Use SFTP to upload the HTML banner file to the /incoming folder.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Enter 4 and follow the prompts to copy the HTML banner file to the appropriate location.

Generate TLS reporting certificates and keys (7.2 and later)

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 2 to go to the Tanium Operations menu. ClosedView screen
  3. Enter X to go to the Advanced Operations menu. ClosedView screen
  4. Use the menu to generate the certificate and key files used in TLS communication:
    • Zone Server (not yet implemented). Enter 5 and follow the prompts to generate the reporting.csr file and key files used in TLS communication from the Tanium Client to the Zone Server. You must copy the CSR file to the Tanium Server appliance so a certificate can be issued and signed by the Tanium Server public key; and then you must copy the resulting reporting.crt file back to the Zone Server.
    • Tanium Server. Enter 6 and follow the prompts to generate the certificate file and key files used in TLS communication from the Tanium Client to the Tanium Server. All of the necessary certificates and keys were generated when you installed the Tanium Server role. Use this menu only if the Tanium Server public key file is changed.