Reference: Tanium Client CLI

The Tanium Client provides a command-line interface (CLI) for viewing and changing client settings.

CLI on Windows endpoints

On Windows, Tanium Client settings are written to the Windows Registry. TaniumClient.exe is the executable program. It is in the Tanium Client installation directory (see Tanium Client installation paths). The following are examples of useful CLI commands.

  • Display the TaniumClient.exe syntax, commands, and options: TaniumClient --help
  • Display the configuration (config) command syntax and actions: TaniumClient config --help
  • Display the current configuration settings: TaniumClient config list

The following example shows how to set and confirm the FQDNs of the Tanium Servers that the Tanium Client connects to in a high availability (HA) deployment:

cmd-prompt> TaniumClient config set ServerNameList ts1.tam.local,ts2.tam.local
cmd-prompt> TaniumClient config get ServerNameList
ts1.tam.local,ts2.tam.local

The following example shows how to configure the connection between Tanium Client 7.4 or later and the Tanium Server to require TLS, and then to confirm that TLS is required:

cmd-prompt> TaniumClient config set TLSMode 1
cmd-prompt> TaniumClient config get TLSMode
1

CLI on Non-Windows endpoints

Tanium Client 7.2 settings are written to an SQLite database instead of the TaniumClient.ini file. The TaniumClient service command is the executable program. It is in the Tanium Client installation directory (see Tanium Client installation paths). You can run it as root or use sudo to elevate permissions. The following are examples of useful CLI commands:

  • Display the TaniumClient.exe syntax, commands, and options: sudo ./TaniumClient --help
  • Display the configuration (config) command syntax and actions: sudo ./TaniumClient config -h
  • Display the current configuration settings: sudo ./TaniumClient config list

The following example shows how to set and confirm the FQDNs of the Tanium Servers that the Tanium Client connects to in a high availability (HA) deployment:

cmd-prompt> sudo ./TaniumClient config set ServerNameList ts1.tam.local,ts2.tam.local
cmd-prompt> sudo ./TaniumClient config get ServerNameList
ts1.tam.local,ts2.tam.local

The following example shows how to configure the connection between Tanium Client 7.4 or later and the Tanium Server to require TLS, and then to confirm that TLS is required:

cmd-prompt> sudo ./TaniumClient config set TLSMode 1
cmd-prompt> sudo ./TaniumClient config get TLSMode
1