Upgrading Tanium Appliance software

Use TanOS to upgrade the TanOS system and the Tanium appliance role: Tanium Server, Module Server, Zone Server, and Zone Server Hub.

Upgrade TanOS

TanOS 1.6.1 is the first release to support the Tanium Cloud Appliance. To migrate from an on-premises appliance to a Tanium Cloud Appliance, contact Tanium Support. For more information, see Contact Tanium Support.

Before you begin

  • Read the release notes for the TanOS versions that were released after your current version to stay informed about expected behavior.
  • Make sure the current deployment is working as expected, including all Tanium Core Platform servers and solutions.
  • Run a health check on each appliance to check the status of network services and Tanium services.
  • Make sure all physical appliance firmware is up-to-date. For more information, see Install a firmware update.

    The TanOS upgrade automatically upgrades BIOS, iDRAC, PERC, and NIC firmware as well as the operating system packages to the latest versions.
    Updating firmware is a major task. The process can take between ten and thirty minutes, depending on the hardware models. Allow the firmware update to complete before you attempt any other appliance tasks. Do not manually power off or reboot the appliance during the update.
  • Obtain the TanOS upgrade package from Tanium Support. The upgrade package is provided as a token URL, which you can either provide directly to TanOS (versions 1.6.6 and higher) or use to download the package file and upload to /incoming.
  • As part of the upgrade, if you have an inactive partition on a physical or virtual appliance, you can choose to perform a partition sync to back up the active partition to the inactive partition. Alternatively, for virtual or cloud appliances, you can create a snapshot of the virtual image before you upgrade. A normal upgrade does not require you to restore from the backups, but backups can save you work in the event you encounter issues and want to restore the appliances to a known functional state.
  • You can create a snapshot of the virtual image before you upgrade. A normal upgrade does not require you to restore from the backups, but backups can save you work in the event you encounter issues and want to restore the appliances to a known functional state.
  • During an upgrade, TanOS stops all Tanium services, and resumes any services after rebooting the appliance.
  • To troubleshoot TanOS upgrade issues, review the upgrade logs at /var/log/tanos_upgrade.

Upgrade paths

When upgrading from 1.6.2 or higher, it is strongly recommended that you have configured an Appliance Array and that you use the Appliance Array to perform TanOS upgrades. If you do not use an Array, you must upgrade each appliance individually. For instructions, see Upgrade an individual Appliance from TanOS 1.5.6 or higher.

Select the upgrade path for your starting TanOS version.
Upgrade to TanOS 1.7.1 is supported only from TanOS 1.5.6 and higher. If upgrading from a lower version, you must first upgrade to TanOS 1.5.6 and then perform the following upgrade procedure.

Upgrade an Appliance Array from TanOS 1.6.6 or higher using a token URL

Use the token URL for the TaniumTanOS_Upgrade-1.7.1-0096.noarch.rpm upgrade file to upgrade to TanOS 1.7.1. You can upgrade all appliances across the array from the primary Tanium Server appliance.

  1. On the primary Tanium Server, sign in to the TanOS console as a user with the tanadmin role.
  2. Enter B to go to the Appliance Maintenance menu.
  3. Enter 3 to go to the Upgrade TanOS menu.
  4. At the prompt, enter Yes to upgrade all appliances in the array. ClosedView screen
  5. Enter T to enter the URL of a token download, and follow the prompts to perform the upgrade.

    When prompted to back up the active partition to the inactive partition, enter Yes.

  6. The TanOS Console displays the upgrade process for each appliance in the array during the upgrade.

What to do next

Perform the following steps after you upgrade TanOS to the latest version.

  1. Run a health check to check the status of network services and Tanium services.
  2. Verify the installation.
  3. If verification fails, see Troubleshooting the installation.

Upgrade an Appliance Array from TanOS 1.6.4 or higher without using a token URL

Download the TaniumTanOS_Upgrade-1.7.1-0096.noarch.rpm upgrade file and copy it to /incoming to upgrade to TanOS 1.7.1. After you upgrade the primary Tanium Server, you can upgrade all other appliances across the array from the upgraded Tanium Server.

You upgrade all appliances across the array from the primary Tanium Server appliance.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. On the primary Tanium Server, sign in to the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 to go to the Upgrade TanOS menu.
  5. At the prompt, enter Yes to upgrade all appliances in the array. ClosedView screen
  6. Enter the line number of the RPM file to use, and follow the prompts to perform the upgrade.
    When prompted to back up the active partition to the inactive partition, enter Yes.
  7. The TanOS Console displays the upgrade process for each appliance in the array during the upgrade.

What to do next

  1. Perform the following steps after you upgrade TanOS to the latest version.

  2. Run a health check to check the status of network services and Tanium services.
  3. Verify the installation.
  4. If verification fails, see Troubleshooting the installation.

Upgrade all appliances in an Appliance Array from TanOS 1.6.2 or 1.6.3 without using a token URL

Download the TaniumTanOS_Upgrade-1.7.1-0096.noarch.rpm upgrade file and copy it to /incoming to upgrade to TanOS 1.7.1. After you upgrade the primary Tanium Server, you can upgrade all other appliances across the array from the upgraded Tanium Server.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. On the primary Tanium Server, sign in to the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 to go to the Upgrade TanOS menu.
  5. Enter the line number of the RPM file to use, and follow the prompts to perform the upgrade.
  6. If you have not backed up the active partition to the inactive partition, enter Yes.
  7. After the primary Tanium Server has been upgraded to 1.7.1 and the reboot has finished, enter B to return to the Appliance Maintenance screen.
  8. Enter 3 to go to the Upgrade TanOS menu.
  9. At the prompt, enter Yes to upgrade all appliances in the array. ClosedView screen
  10. Enter the line number of the RPM file to use, and follow the prompts to perform the upgrade.

    When prompted to back up the active partition to the inactive partition, enter Yes.

  11. The TanOS Console displays the upgrade process for each appliance in the array during the upgrade.

What to do next

Perform the following steps after you upgrade TanOS to the latest version.

  1. Run a health check to check the status of network services and Tanium services.
  2. Verify the installation.
  3. If verification fails, see Troubleshooting the installation.

Upgrade an individual Appliance from TanOS 1.5.6 or higher

Download the TaniumTanOS_Upgrade-1.7.1-0096.noarch.rpm upgrade file and copy it to /incoming to upgrade to TanOS 1.7.1.

Complete this procedure on each appliance in your deployment.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Sign in to the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 to go to the Upgrade TanOS menu.
  5. Enter the line number of the RPM file to use and follow the prompts to perform the upgrade.
    When prompted to back up the active partition to the inactive partition, enter Yes.

What to do next

Perform the following steps after you upgrade TanOS to the latest version.

  1. Run a health check to check the status of network services and Tanium services.
  2. Verify the installation.
  3. If verification fails, see Troubleshooting the installation.
  4. If your deployment does not use an appliance array, create one after all appliances are upgraded. For instructions, see Installing an Appliance Array.

Upgrade from TanOS 1.6.x

Use the TaniumTanOS_Upgrade-1.7.1-0096.noarch.rpm upgrade file to upgrade to TanOS 1.7.1.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Sign in to the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 to go to the Upgrade TanOS menu.
  5. Enter the line number of the RPM file to use or, in TanOS 1.6.6 and higher, enter T to enter the URL of a token download, and follow the prompts to perform the upgrade.
    When prompted to back up the active partition to the inactive partition, enter Yes.

Upgrade Tanium

The server upgrade RPM files are included in TanOS installation and upgrade package zip files. It is possible that a server upgrade package is delivered separately. If so, copy the upgrade package to the /incoming directory on the Tanium Appliance and then use the TanOS menus to upgrade.

It is strongly recommended you have an Appliance Array configured and Tanium upgrades are performed using the Appliance Array.

Upgrade path

Check with Tanium Support to understand the ramifications of direct upgrade and whether intermediate steps are recommended. For more information, see Contact Tanium Support.

Before you begin

  • Read the release notes for all of the Tanium Core Platform versions that were released after your current version to stay informed about expected behavior.
  • All servers must have the same version number (for example, 7.4.4.1250); be prepared to upgrade all Tanium servers in your environment. The maintenance window for upgrading Tanium Core Platform servers is usually under an hour. As a best practice, complete the upgrade for all the servers in the same maintenance window. If you have a Tanium cluster, complete the upgrade for both Tanium Servers in the same window.
  • Tanium will provide the upgrade package files.
  • Upgrade all appliances to TanOS 1.7.1 or higher to use the following steps. See Upgrade TanOS.
  • Make sure the current deployment is working as expected, including all Tanium Core Platform servers and solutions.
  • Perform a backup of the appliance. See TanOS backup options.
  • If you have a Tanium cluster, complete the upgrade for all Tanium Server peers in the same window.

Upgrade the Tanium server software

To upgrade Tanium, use the following procedure to have TanOS download the Tanium Server upgrade package from download.tanium.com and upgrade all appliances within an array. You can either provide the token URL for the upgrade package during the upgrade process or manually upload the PRM package to /incoming.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 1 to go to the Tanium Installation menu. ClosedView screen
  3. Enter U to upgrade Tanium software.
  4. Enter Yes to upgrade Tanium on all appliances in the array.ClosedView screen
  5. If you have uploaded the RPM file to /incoming, enter the line number of the upgrade package. Otherwise, enter T and paste the upgrade token URL provided by Tanium.

Order of upgrade

If you cannot use the Appliance Array to perform the upgrade, upgrade Tanium Core Platform servers in the following order:

  1. Tanium Server (and Zone Server Hub, if applicable)
  2. Module Server
  3. Zone Server

For a Tanium cluster, upgrade the primary server first, followed by the secondary server.

What to do next

After you upgrade Tanium software, perform the steps listed on Verifying the installation to make sure the deployment is working as expected. If verification fails, see Troubleshooting the installation.