Tanium™ Asset 1.6 User Guide

PDF 1.6
PDF 1.5
  • All Files
Documentation Home > Tanium Asset User Guide

Installing Asset

You can install Asset from the Tanium Solutions page.

Before you begin

Import Asset

Import Asset from the Tanium Solutions page.

  1. From the Main menu, click Tanium Solutions.

  2. Under Tanium Asset, click Import.

    Tanium Asset is a licensed solution. If Tanium Asset is not on the Tanium Solutions page, contact your Technical Account Manager.

  3. Initiate the import.
  4. After the installation process completes, refresh your browser.
  5. From the Main menu, click Asset. The Asset home page is displayed.

Verify installation

To verify that Asset is installed, go to the Tanium Solutions page and check the installed version. To check the installed version on the Asset home page, click Info .

Configure Asset service account

(Windows) Modify Asset service account

Update the Asset service to use a Windows administrator user. By default, the Asset service runs as Local System.

  1. In your Tanium Module Server machine, open the Services panel. Go to Control Panel > Administrative Tools > Services.
  2. Right click the Tanium Asset service, and select Properties.
  3. In the Log On tab, specify the user with Windows Administrator credentials that you want to use to run the service.
  4. Stop and restart the service to complete the update.

Configure Asset service account and import process

Configure the service account and Asset import process in Asset. The service account runs background processes.

  1. From the Asset menu, go to Inventory Management > Sources.
  2. For the Tanium source, click Edit .
  3. Add the user name and password for the service account. The selected user must be a Tanium Administrator. You can also disable and change the log level settings for the Asset import process.
  4. Configure the asset data import schedule. The data import schedule determines how often asset data is imported from the Tanium live data into the asset database. This database provides data for offline assets. You can create a standard interval or a Cron schedule. For example, you might create one of the following intervals based on your environment size:
    • Less than 50,000 devices: every 1-2 hours
    • Less than 250,000 devices: every 4 hours
    • Greater than 500,00 devices: consult your TAM to configure the import schedule

    For more information about the Cron syntax, see Reference: Cron syntax.

Enable collection of Active Directory (AD) information

(Optional) To gather user data from Windows endpoints, including Full Name, Email, Phone, Department, and Location, install the Active Directory Query solution and create a scheduled action for the Collect Active Directory Info package.

For Mac and Linux endpoints, you do not need to deploy any actions to get this information.

  1. Install the Active Directory Query solution.
    1. From the Main menu, click Tanium Solutions.
    2. In the Tanium Content section, select the Active Directory Query row and click Import Solution.
    3. Review the list of packages and sensors and click Proceed with Import.

  2. Run the Collect Active Directory Info package on your endpoints with a scheduled action. For more information, see Tanium Core Platform User Guide: Managing Scheduled Actions.

    1. Use the Is Windows sensor to target Windows endpoints.

    2. Deploy the Collect Active Directory Info package to your endpoints. Configure a saved action as a scheduled action. Set Distribute Over to 1 hour, and set Reissue Every to 3 hours.

The action gets recent sign ins and the primary user of each system. A primary user has the most interactive sign ins the past 30 days. You can access this information with the Primary User Details sensor, or by adding the User Name column to a report.

Upgrade the Asset version

Upgrade Asset to the latest version from the Solutions page.

  1. From the Main menu, click Tanium Solutions.
  2. Locate Asset and click Upgrade to X.X.X.XX.
  3. Click OK.

    The Import Solution window opens with a list of all the changes and import options.

  4. Click Proceed with Import and enter your password.
    The Tanium Asset installation and configuration process begins.
  5. To confirm the upgrade, return to the Tanium Solutions page and check the Installed: X.X.X.XX version for Asset.

    If the Asset version is not updated, refresh your browser window.

What to do next

See Getting started for more information about using Asset.

Last updated: 4/9/2019 7:16 PM | Feedback