Upgrading Tanium Appliance software

You can use TanOS to upgrade the TanOS system, the TanOS shell, and Tanium appliance role: Tanium Server, Module Server, Zone Server, and Zone Server Hub.

About Tanium Appliance software versions

The TanOS version is the version of the appliance operating system and menus. The appliance operating system is updated periodically to support new features and to support new Tanium Core Platform features.

The TanOS shell version is separate from the TanOS version. Shell updates are included in operating system rpm packages. When necessary to address issues, special shell updates can distributed as separate rpm packages.

The Tanium Core Platform version is the version of the platform server component. All components must run the same build version. The TanOS distribution includes installers for supported Tanium Core Platform versions. In Tanium Appliance deployments, support for a Tanium Core Platform release might require a TanOS upgrade.

Tanium Core Platform TanOS version required
7.3 1.3.4 or later
7.2 1.2 or later, 1.3 recommended
7.1 1.2 recommended

Follow the upgrade paths indicated. Direct upgrade can result in unexpected behavior and is not supported.

Upgrade TanOS

Copy the upgrade package to the /incoming directory on the Tanium Appliance and then use the TanOS menus to install it.

Upgrade path

  1. Starting from TanOS 1.0.0-365.
  2. Upgrade the TanOS shell to 1.0.0-480.
  3. Use the TaniumTanOS_Upgrade-1.1.0-62.noarch.rpm upgrade file to upgrade to TanOS 1.1.0-420.
  4. Use the TaniumTanOS_Shell-1.0.0-541.noarch.rpm upgrade file to upgrade the TanOS shell to 1.0.0-541.
  5. Use the TaniumTanOS_Upgrade-1.2.0-46.noarch.rpm upgrade file to upgrade to TanOS 1.2.0.

    From TanOS 1.2.0, you can upgrade directly to TanOS 1.2.1 or TanOS 1.3.4.

  6. Optional. Use the TaniumTanOS_Upgrade-1.2.1.noarch.rpm upgrade file to upgrade to TanOS 1.2.1. If your target is 1.3.4, you can skip this step.
  7. Use the TaniumTanOS_Upgrade-1.3.4.noarch.rpm upgrade file to upgrade to TanOS 1.3.4.
  8. Use the TaniumTanOS_Upgrade-1.5.0.noarch.rpm upgrade file to upgrade to TanOS 1.5.0.
  1. Starting from TanOS 1.3.x or later.
  2. Use the TaniumTanOS_Upgrade-1.5.0.noarch.rpm upgrade file to upgrade to TanOS 1.5.0.

Upgrade from TanOS 1.5.x

TanOS 1.5 includes improvements to how maintenance mode is invoked during the upgrade workflow.

Follow these steps when upgrading from a TanOS 1.5.0 release to a later release.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Log into the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 to go to the Upgrade TanOS menu.
  5. When prompted to enter maintenance mode, enter Yes.
  6. When prompted to back up the active partition to the inactive partition, enter Yes.
  7. After the appliance has rebooted, exit maintenance mode:
    1. From the tanadmin menu, enter B to go to the Appliance Maintenance menu.
    2. Enter C to go to the Maintenance Mode menu.
    3. Enter 2 and follow the prompts to toggle off maintenance mode.

Upgrade from TanOS 1.4.x

TanOS 1.4 introduces a maintenance mode feature to ensure that the Tanium services that could potentially be disrupted by the upgrade operation are shut down properly before the upgrade process.

Follow these steps when upgrading from a TanOS 1.4.0 release to a later release.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Log into the TanOS console as a user with the tanadmin role.
  3. Enter Maintenance Mode:
    1. From the tanadmin menu, enter B to go to the Appliance Maintenance menu.
    2. Enter C to go to the Maintenance Mode menu.
    3. Enter 1 and follow the prompts to toggle on maintenance mode.
  4. From the Maintenance menu, enter 3 to go to the Upgrade TanOS menu.
  5. When prompted to back up the active partition to the inactive partition, enter Yes.
  6. After partition sync has completed, follow the prompt to install the upgrade rpm.

    The appliance reboots to complete the upgrade.

  7. After the appliance has rebooted, exit maintenance mode:
    1. From the tanadmin menu, enter B to go to the Appliance Maintenance menu.
    2. Enter C to go to the Maintenance Mode menu.
    3. Enter 2 and follow the prompts to toggle off maintenance mode.

Upgrade from TanOS 1.3.x

Version 1.3 does not have maintenance mode.

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Log into the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 3 and then follow the prompts to complete the upgrade.

Upgrade the TanOS shell

Typically, the TanOS shell upgrades are included in TanOS operating system upgrades. It is possible that a TanOS shell upgrade package is delivered separately. If so, copy the upgrade package to the /incoming directory on the Tanium Appliance and then use the TanOS menus to install it.

Upgrade path

No dependencies, but the version should be in the range beginning with the version included with the TanOS release and ending with the last shell version before the next TanOS release. Upgrade only as necessary. Downgrade is not supported.

Upgrade the TanOS shell

  1. Use SFTP to copy the TanOS upgrade file to the /incoming directory on the appliance.
  2. Log into the TanOS console as a user with the tanadmin role.
  3. Enter B to go to the Appliance Maintenance menu.
  4. Enter 4 to go to the Upgrade TanOS Shell menu.
  5. When prompted to enter maintenance mode, enter Yes.
  6. Follow the prompts to complete the upgrade and reboot.
  7. After the appliance has rebooted, exit maintenance mode:
    1. Enter B to go to the Appliance Maintenance menu.
    2. Enter C to go to the Maintenance Mode menu.
    3. Enter 2 and follow the prompts to toggle off maintenance mode.

Upgrade Tanium server software

The server upgrade rpms are included in TanOS installation and upgrade packages. It is possible that a server upgrade package is delivered separately. If so, copy the upgrade package to the /incoming directory on the Tanium Appliance and then use the TanOS menus to install it.

Upgrade path

Check with your technical account manager (TAM) to understand the ramifications of direct upgrade and whether intermediate steps are recommended.

Before you begin

  • Read the release notes for all of the core platform software versions that were released after your current version to stay informed about expected behavior.
  • Your TAM will let you know when upgrades are advised and can assist you with the upgrade.
  • Your TAM will provide the upgrade package files.
  • All servers must have the same version number (for example, 7.3.314.3668), so you must be ready to upgrade all Tanium servers in your environment.
  • Make sure the current deployment is working as expected.
  • Back up the database. See Backup the Tanium database.
  • Back up the appliance. See Back up to the alternate partition.
  • If you have a high availability (HA) cluster, complete the upgrade for all Tanium Server HA peers in the same window.

Order of upgrade

You must upgrade Tanium Core Platform servers in the following order:

  1. Tanium Servers (primary and non-primary servers in HA deployments)
  2. Module Server
  3. Zone Server Hub
  4. Zone Server

Upgrade the server software

  1. If necessary, use SFTP to copy the Tanium server RPM file to the /incoming directory on the appliance.
  2. Log into the TanOS console as a user with the tanadmin role.
  3. From the main menu, enter 1 to go to the Tanium Installation menu.
  4. Enter U to go to the software upgrade page.
  5. When prompted to enter maintenance mode, enter Yes.
  6. Follow the prompts to complete the upgrade.
  7. After the upgrade has completed, exit maintenance mode:
    1. From the tanadmin menu, go to the Appliance Maintenance menu.
    2. Enter C to go to the Maintenance Mode menu.
    3. Enter 2 and follow the prompts to toggle off maintenance mode.

What to do next

After the upgrade, check to see if the firmware requires an update. For more information, see Install a firmware update.

Last updated: 11/13/2019 8:27 AM | Feedback