Reference: TanOS menu map

The following tables list the available options in the TanOS menus.

Not all menu paths are available on every server or in every deployment.

TanOS menu

The main TanOS console menu contains the following options.

Option Menu
1 Tanium Installation Menu
2 Tanium Operations Menu
3 Tanium Support Menu
4 Status Menu
A Appliance Configuration Menu
B Appliance Maintenance Menu
C User Administration Menu
P Password change (current user)
Q View end user license agreement (EULA)
@  About this appliance
H Help
Z Log out

Common menu options

The following table lists menu items that are found on many screens in the TanOS console.

Menu Item Description
H - Help Opens a screen providing additional details.
R - Return to previous menu Returns to the previous screen.
RR - Return to top Return to the main TanOS menu.

Tanium Installation Menu

Enter 1 to access the installation menu.

M - Manage Appliance Array
For more information, see Reference: Appliance Array menu. C - Create Appliance Array
  A - Add Member
  F - Refresh Appliance Array
  I - Install Pending Role Changes
  X - Reset Appliance Array
1 - Install Tanium Server (All-in-one)  
2 - Install Tanium Server Service  
3 - Install Tanium Module Server Service  
4 - Install Tanium Zone Server Service  
U - Upgrade Tanium Software  
E - Remove Tanium Zone Server Hub Add-On  

Tanium Operations Menu

Enter 2 to access the operations menu. For more information, see Reference: Tanium Operations menu.

1 - Tanium Service Control

 

 x - service name 1 - Start service
    2 - Stop service
    3 - Restart service
    4 - Disable service
    6 - Status details
  A - Restart all enabled Tanium services  
  B - Stop all Tanium services  
  C - Start all Tanium services  
  D - Disable all Tanium services  
  E - Enable all Tanium services  
2 - Tanium Configuration Settings
   1 - Edit Tanium Server Settings1  
  2 - Edit Tanium Server TDL Settings1  
  3 - Add Tanium Server TDL Auth User1  
  4 - Add Tanium Server TDL Auth Cert 1  
  5 - Edit Tanium Module Server Settings2  
  6 - Edit Tanium Module Server TDL Settings2  
  7 - Add Tanium Module Server TDL Auth User2  
  8 - Add Tanium Module Server TDL Auth Cert2  
  9 - Edit Tanium Zone Server Settings3  
  10 - Edit Zone Server List3  
  11 - Edit Isolated Subnets List3  
  12 - Edit Separated Subnets List3  
  13 - Control Root CA Certs  
4 - Install custom SOAP certificates    
5 - Manage custom signing keys
   L - List content signing keys  
  A - Add content signing key  
  D - Delete content signing key  
6 - Download public key    
7 - Download SOAP certificate    
9 - Import CAC certificate    
A - Configure remote module server1    
A - Register module server2    
B - Configure cluster1    
C - Manage content
   1 - Install airgap content  
  2 - Airgap usage report  
  3 - Prune airgap content  
  4 - Manage web server content  
  A - Edit airgap options  
  B - Set manifest  
D - Configure module server sync2    
M - Module operations4
   1 - Copy trace proxy package file2  
  A - (Legacy) Install trace proxy package3  
  B - Install Tanium Direct Connect zone proxy3  
  C - Remove Tanium Direct Connect zone proxy3  
I - Import public key to Tanium Zone Server5    
X - Advanced operations6
For more information, see Reference: Advanced Operations menu .  1 - 2FA import  
  2 - Toggle UseTBBAllocatorStats  
  3 - Generate new keys (tanium.pub)  
  4 - Manage HTML banner  
  5 - Generate reporting keys (Zone Server to Server)  
  6 - Generate reporting keys (Client to Server)  

1Menu path present on Tanium Server only.
2Menu path present on Tanium Module Server only.
3Menu path present on Tanium Zone Server only.
4Menu path present on Tanium Module Server and Tanium Zone Server only.
5 Menu path present on Tanium Server and Tanium Zone Server only.
6 Menu path present on Tanium Server and Tanium Module Server only.

Tanium Support Menu

Enter 3 to access the Tanium Support Menu. For more information, see Reference: Tanium Status and Support menus.

1 - Tanium Log Files
  1 - TanOS Appliance
      1 - TanOS Log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    2 - Upgrade log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    3 - Health log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    4 - Health failure log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    5 - Messages log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    6 - License log  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
  2 - Tanium Server1
    1 - Tanium Server log (log0.txt)  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    2 - Tanium Server TDL log (log0.txt)  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    3 - Tanium Server RBAC log (rbac0.txt)  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    4 - Tanium Server PAM4 log (tanium_pam4.log)  V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    5 - Tanium Server workbenches
(workbenches_manager.log)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    6 - Tanium Server signature verifier
(signature_verifier.log)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    7 - Tanium Server DB upgrade log
(database-upgrade0.txt)
V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    8 - Tanium Server Auth0 log
(auth0.txt)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
  3 -Tanium Module Server2
  1 - Tanium Module Server log
(log0.txt)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    2 - Tanium Module Server TDL log
(log0.txt)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
    3 - TMS PluginsManager log
(plugins_manager.log)
 V - View file
      F - Follow log file growth
      T - Delete content of log file
      E - Export to outgoing (SFTP)
  4 - Tanium Zone Server3
     V - View file  
    F - Follow log file growth  
    T - Delete content of log file  
    E - Export to outgoing (SFTP)  
  5 - PostgreSQL4
     x - PostgreSQL log file name  V - View file
      F - Follow log file growth
      E - Export to outgoing (SFTP)
2 - Tanium Module log files2
  x - Module name    
3 - Database Operations1
  1 - Display Postgres log file    
  2 - View Postgresql config files    
  3 - Display Postgres control data    
  4 - Enable full Postgres audit logs    
  D - Database memory plan V - View DB memory plan settings  
    S - Select DB memory plan  
    A - Apply DB memory plan  
  M - Monitor database    
  Q - Manage database queries S - Select query  
    X - Execute query  
    V - View query  
    Q - View query results  
  S - Replication status    
  F - Database server failover    
  I - Reinitialize replication    
  C - Reset cluster role    
4 - Run Network Diagnostics
  1 - Ping Remote System    
  2 - Test Remote Port (TCP)    
  3 - Trace Path (UDP)    
  4 - Resolve Name    
  5 - Check IPSEC    
  6 - Listening Ports    
5 - Run Health Check      
6 - Display Last Scheduled Health Check Results      
7 - Appliance Hardware Report      
A - Run TSG (Tanium Support Gatherer)      
B - Run TCPdump      
P - Performance Monitoring      
X - Advanced Support
  1 - Copy Core Files    
  2 - Generate Process Memory Dump    
  3 - Directory Space Usage    
  D - Database Query Management1 S - Select Query  
    X - Execute Query  
    V - View Query  
    Q - View Query Results  
  V - Internal Tanium VPN Connection    

1Tanium Server only
2Tanium Module Server only
3Tanium Server and Tanium Zone Server only
4Tanium Server and Tanium Module Server only

Status Menu

Enter 4 to access the Status Menu. For more information, see Reference: Tanium Status and Support menus.

1 - System Status
  1 - OS Status
  2 - Network Status
2 - Tanium Status Menu
  x - service name
3 - Appliance Status Menu
  1 - Appliance version details
  2 - Appliance status (OS)
  3 - Appliance status (HW)

Appliance Configuration Menu

Enter A to access the appliance configuration menu. The following table lists the options within the appliance configuration menu. For more information and procedures, see Reference: Appliance configuration.

1 - Hostname/DNS configuration
  1 - Manage hostname/domain name  
  2 - Manage DNS server  
  3 - Edit hosts file  
2 - Networking configuration
  1 - Network interfaces  
  2 - IPSEC configuration  
  3 - Routing configuration  
  4 - Restart networking  
  I - iDRAC management 1 - iDRAC interface configuration
    2 - Close all iDRAC sessions
    3 - Reset iDRAC
  T - NIC teaming A - Create a network team
3 - NTP configuration    
4 - Syslog configuration
  1 - Check current status  
  2 - View trust certificate  
  3 - Upload trust certificate  
  4 - Remove trust certificate  
  5 - Configure syslog forwarding  
5 - SNMP configuration
  U - Change the username  
  L - Change the location  
  C - Change the contact  
  V - View SNMP service status  
  D - Stop the SNMP service  
  S - Set password and start the SNMP service  
6 - Module file share configuration1
  1 - Create a new Connect mount  
  2 - Create a new Detect mount  
  3 - Create a new Trends mount  
  4 - Delete an existing Connect mount  
  5 - Delete an existing Detect mount  
  6 - Delete an existing Trends mount  
  A - List existing mounts  
  B - Test existing mounts  
  C - Re-attempt mounts  
7 - Reset all NICs to DHCP2    
A - Security
  2 - Manage SSH A - Add rule to allow inbound SSH
  D - Delete rule to allow inbound SSH
  3 - Configure SSH banner  
  4 - Display SSH fingerprints  
  5 - Regenerate SSH host keys  
  A -LDAP CA certificate management3
    1 - Add certificate
    2 - Import certificate
    3 - Enable LDAPS configuration
    4 - Disable TLS certificate validation
    5 - List certificates
  B -Database certificate management3
    1 - Import server certificate
    2 - Export server certificate
    3 - Import client certificate
    L - List certificates
  P - Security policy
    1 - Password lifetime
    2 - Password history reuse limit
    3 - Password minimum length
    4 - Password minimum characters changed
    D - Login failure delay
    E - Expired passwords effect
    L - Account lockout time
    M - Maximum concurrent logins
  X - Advanced security
    1 - FIPS 140-2 mode (disabled/enabled)
    2 - AIDE
    3 - SSH ciphers
    4 - Toggle SELinux mode (permissive/enforcing)
X - Advanced configuration
  3 - Change active partition4  
  4 - Change RAID controller key5  
  5 - Export RAID controller key5  
  6 - Export grub key  
  7 - Generate new grub key  

1Tanium Module Server only
2Virtual machines only
3Tanium Server and Tanium Module Server only
4Only when alternate partition is enabled
5Physical appliances only

Appliance Maintenance Menu

Enter B to access the appliance maintenance menu. The following table lists the options within the appliance maintenance menu. For more information and procedures, see Reference: Appliance Maintenance menu.

1 - Backup
  Automatic Backups  
  E - Set encryption key  
  C - Configure automatic backup N - Configure core backup
    F - Configure comprehensive backup
  A - Run automatic backup now  
  S - Schedule automatic backup N - Schedule core backup
    F - Schedule comprehensive backup
  Manual Backups  
  P - Partition sync  
  N - Core backup  
  F - Comprehensive backup  
  4 - Backup Tanium database  
  5 - List Database backups  
2 - Alerting
  1 - Configure syslog destination  
  2 - Configure SMTP destination  
  3 - Configure alerts  
  4 - Status  
3 - Upgrade TanOS    
5 - Shell keys
  1 - Validate response  
  2 - Remove shell access  
  3 - Launch shell  
  O - Open read only restricted shell  
  W - Request read write restircted shell activation  
  F - Request full shell activation  
  L - Shell key listing  
  A - Revoke all shell keys  
A - Clean directories
  1 - SFTP (in/out)  
  2 - Cores  
  3 - Tanium application logs  
  4 - Tanium TSG HTTP files  
  5 - Tanium Connect output logs  
  T - /tmp directory  
B - Reboot/Shutdown
  1 - Reboot the appliance  
  2 - Shutdown the appliance  
C - Maintenance mode
  1 - Clear maintenance action  
E - Enable alt partitions    
I - Increase storage    
S - OS services
  1 - ntpd 1 - Start service
    2 - Stop service
    3 - Restart service
    4 - Disable service
    5 - Enable service
    6 - Status details
  2 - sshd 1 - Start service
    2 - Stop service
    3 - Restart service
    4 - Disable service
    5 - Enable service
    6 - Status details
T - Tokens download    
X - Advanced configuration

For more information, see Reference: Advanced Configuration menu.

1 - Install firmware updates1  
2 - Appliance reset 1 - Software reset
  3 - Re-apply ACLs  
  4 - View TanOS upgrade log file  
  5 - View TanOS partition sync log file  
1Physical appliance only

User Administration Menu

Enter C to access the user administration menu. For more information and procedures, see Reference: User Administration menu.

U - TanOS user management
  x - individual user A - Manage SSH authorized keys
    P - Manage SSH key pair
    L - Reset SSH lockout
    C - Change/enable password
    N - Disable password access
    E - Enable account
    D - Disable account
    X - Delete user
    F - Edit known hosts file
  A - Add system user  
I - Recent login information
  A - View last 20 successful logins  
  B - View last 20 failed logins  
  C - View login statistics  
L - Local Tanium user management
  1 - Add local user  
  2 - Manage local user(s)  
  A - Enable/disable local authentication service  
  B - Security policy local authentication service