Reference: TanOS command line interface
Tanium Appliances contain a command line interface (CLI) that you can access from SSH.
Requirements
- The CLI is available to users with the tanadmin role.
Syntax
ssh -qt <user>@<ip> <command> <options...>
Tanium platform commands
Command | Description |
---|---|
add hub | Install the Tanium Zone Server Hub add-on to an existing Tanium Server role. |
configure module service |
Configure the Tanium Server appliance to use a Tanium Module Server. Specify the IP address of the Tanium Module Server, such as: ssh -qt [email protected] configure module server 10.10.10.15 |
help | Show a list of available commands. Add help to any command to show help for the particular command. |
install aio | Install the Tanium All-in-One role. Specify the version of Tanium to install, such as:ssh -qt [email protected] install aio 7.4.4.1250 If you run the command without a version, the server returns the available versions found on the server; this includes the versions that ship with TanOS and any other versions (of the RPM upgrade files) that are found in the /incoming directory. |
install tms | Install the Tanium Module Server role. Specify the version of Tanium to install, such as:ssh -qt [email protected] install tms 7.4.4.1250 If you run the command without a version, the server returns the available versions found on the server; this includes the versions that ship with TanOS and any other versions (of the RPM upgrade files) that are found in the /incoming directory. |
install ts | Install the Tanium Server role. Specify the version of Tanium to install, such as:ssh -qt [email protected] install ts 7.4.4.1250 If you run the command without a version, the server returns the available versions found on the server; this includes the versions that ship with TanOS and any other versions (of the RPM upgrade files) that are found in the /incoming directory. |
install tzs | Install the Tanium Zone Server role. Specify the version of Tanium to install, such as:ssh -qt [email protected] install tzs 7.4.4.1250 If you run the command without a version, the server returns the available versions found on the server; this includes the versions that ship with TanOS and any other versions (of the RPM upgrade files) that are found in the /incoming directory. Make sure to import the public key to the Zone Server appliance before you run this command (TanOS menu 2-I). For Tanium Core Platform 7.3 and earlier, copy the tanium.pub file from the Tanium Server appliance. In Tanium Core Platform 7.4 and later, the public keys are stored in the tanium-init.dat file. For detailed steps, see Import the Tanium Server public key file to the Zone Server. |
register module service | Run this command from a Tanium Module Server appliance to register the Tanium Module Server with a Tanium Server appliance. Specify the fingerprint of the Tanium Module server, in addition to the IP address and/or FQDN of the Tanium Server, such as:ssh -qt [email protected] register module service <fingerprint> 10.0.0.10 ts.example.com |
remove hub | Remove the Tanium Zone Server Hub add-on. |
upgrade tanium | Upgrade the Tanium software on the appliance. Specify the version of Tanium to install, such as: ssh -qt [email protected] upgrade tanium 7.4.4.1250 If you run the command without a version, the server returns the available versions found on the server; this includes the versions that ship with TanOS and any other versions (of the RPM upgrade files) that are found in the /incoming directory. |
Appliance Array commands
Command | Description |
---|---|
add array member | Add another appliance to the Appliance Array that is defined on the current appliance. Example:ssh -qt [email protected] add array member 10.0.0.5 |
create array | Create an Appliance Array and add the current appliance as a member. Specify the IP address of the appliance and the name of the array (can include spaces). Example:ssh -qt [email protected] create array 10.0.0.4 My TanOS Array |
reset array | Remove the current appliance from an Appliance Array. Example:ssh -qt [email protected] reset array |
TanOS management commands
Command | Description |
---|---|
add pubkeys | Add entries to the authorized_keys file for the user. |
copy pubkeys tancopy | Copy the SSH keys for the user to the tancopy user account. |
report info | Report basic information for the appliance, including the serial number, server name, TanOS version, role, and Tanium version. |
reset software | Removes all Tanium Core Platform software from the appliance, but preserves network and system user configuration. Requires a confirmation to proceed. |
set backup key |
Set the public key to encrypt backup files. The public key must be in PEM format. |
show pubkeys | Show the SSH public keys for the user |
upgrade appliance | Upgrade TanOS on the appliance. Specify the version of TanOS to upgrade to, such as:
ssh -qt [email protected] upgrade appliance 1.6.3 If you run the command without a version, the server returns the available versions (of the RPM upgrade files) that are found in the /incoming directory. |
Examples
Show a list of commands
Command:
ssh -qt [email protected] help
Example response:
The following commands are available in the TanOS CLI. Tanium Platform install aio: Install the All-in-One role install ts: Install the Tanium Server role install tms: Install the Tanium Module Server role install tzs: Install the Tanium Zone Server role add hub: Add a Zone Server Hub to a TS or AiO remove hub: Remove the Tanium Zone Server Hub upgrade tanium: Upgrade Tanium software configure module service: Configure the Tanium Server to use a module server register module service: Register the Tanium Module Server TanOS Appliance Array create array: Create a new Appliance Array reset array: Reset this appliance's Array configuration add array member: Add a Member to the Array TanOS Management report info: Report information about the appliance reset software: Reset the software on the appliance upgrade appliance: Upgrade the appliance set backup key: Set the Backup Encryption Key copy pubkeys tancopy: Copy the user's SSH keys to tancopy To see more information about each command, run it with the option "help". E.g. ssh -qt [email protected] install ts help
Show help for the install aio command
Command:
ssh -qt [email protected] install aio help
Example response:
Install the All-in-One role Installs the All-in-One role (TaniumServer and TaniumModuleServer) onto the appliance. This option requires the password to be used for the 'tanium' console user. Usage: install aio <version> Example: ssh -qt [email protected] install aio 7.4.2.2036 Menu: 1-1
Install the Tanium Zone Server Hub add-on
Command:
ssh -qt [email protected] add hub
Example response:
staging /opt/utils/installers/TaniumZoneServer-7.4.2.2036-1.rhe7.x86_64.rpm Checking RPM signatures Signature verification succeeded. Installing Tanium Zone Server Preparing packages... TaniumZoneServer-7.4.2.2036-1.rhe7.x86_64 TaniumZoneServer service installed. Complete installation by: 1. Set ServerName with '/opt/Tanium/TaniumZoneServer/TaniumZoneServer config set ServerName <name>' 2. Set any desired optional settings (ServerPort, LogVerbosityLevel, etc) by running '/opt/Tanium/TaniumZoneServer/TaniumZoneServer config set <key> <value>' 3. Copy tanium-init.dat file into /opt/Tanium/TaniumZoneServer/TaniumZoneServer 4. Enable the TaniumZoneServer with 'systemctl enable taniumzoneserver' 5. Start the TaniumZoneServer with 'systemctl start taniumzoneserver' If you are configuring this to be a TaniumZoneServer Hub do the following: 1. '/opt/Tanium/TaniumZoneServer/TaniumZoneServer config set ZoneHubFlag 1' 2. Create a file named ZoneServerList.txt in the /opt/Tanium/TaniumZoneServer/ directory with the ip addresses/FQDNs of the ZoneServers Tanium Zone Server Installation completed Configuring Zone Server Hub Add-On Zone Server Hub install - copied public key Tanium Zone Server Installation completed
Retrieve appliance information
Command:
ssh -qt [email protected] report info
Example response:
Serial Number: 5c7a65fd-2b96-4732-b2a1-fd9f56b8801e Name: ts1 TanOS Version: 1.6.0.0134 Role: Tanium Server TaniumServer: 7.4.2.2036
Last updated: 3/2/2021 10:18 PM | Feedback