Reference: Advanced Operations menu

You can use the Advanced Operations menu to make additional changes that might be required in atypical environments.

Consult with your technical account manager (TAM) before using advanced options.

Import an authentication plugin configuration file

The Tanium Appliance includes a local authentication service that can be used for Tanium Console user authentication. You can create and delete users and manage their passwords.

In addition, you can configure Tanium Console authentication against your enterprise LDAP server. For details on using LDAP, see the Tanium Console User Guide: Using LDAP.

The Tanium Appliance also supports a pluggable authentication module for many commonly used authentication methods. For details, contact your TAM.

Enable UseTBBAllocatorStats

  1. Log into the TanOS console as a user with the tanadmin role.
  2. From the tanadmin menu, enter 2 to go to the Tanium Operations menu.
  3. Enter X to go to the Advanced Operations menu.
  4. Enter 2 and follow the prompts to enable UseTBBAllocatorStats.

Generate a new tanium.pub/tanium.pvk pair

  1. Log into the TanOS console as a user with the tanadmin role.
  2. From the tanadmin menu, enter 2 to go to the Tanium Operations menu.
  3. Enter X to go to the Advanced Operations menu.
  4. Enter 3 and follow the prompts to generate new a Tanium Server public-private key pair.

Upload an HTML banner

You can add a pre-login page to provide information or warnings to users before they log into the Tanium Console. For complete details, see the Tanium Support Knowledge Base: Adding a pre-login page to the Tanium Console (login required). You can use TanOS Advanced Operations menu to upload the banner.html file.

  1. Use SFTP to upload the HTML banner file to the /incoming folder.
  2. From the tanadmin menu, enter 2 to go to the Tanium Operations menu.
  3. Enter 2 to go to the Tanium Operations menu.
  4. Enter X to go to the Advanced Operations menu.
  5. Enter 4 and follow the prompts to copy the HTML banner file to the appropriate location.

Generate TLS reporting certificates and keys (7.2 and later)

  1. Log into the TanOS console as a user with the tanadmin role.
  2. From the tanadmin menu, enter 2 to go to the Tanium Operations menu.
  3. Enter X to go to the Advanced Operations menu.
  4. Use the menu to generate the certificate and key files used in TLS communication:
    • Zone Server (not yet implemented). Enter 5 and follow the prompts to generate the reporting.csr file and key files used in TLS communication from the Tanium Client to the Zone Server. You must copy the CSR file to the Tanium Server appliance so a certificate can be issued and signed by the Tanium Server public key; and then you must copy the resulting reporting.crt file back to the Zone Server.
    • Tanium Server. Enter 6 and follow the prompts to generate the certificate file and key files used in TLS communication from the Tanium Client to the Tanium Server. All of the necessary certificates and keys were generate when you installed the Tanium Server role. Use this menu only if the Tanium Server public key file is changed.

Last updated: 6/4/2019 9:19 AM | Feedback