Deploying the Tanium Client to Linux endpoints

Linux links

The Taniumâ„¢ Client is installed as a system service. The Tanium Client files are installed by default in the /opt/Tanium/TaniumClient directory.

The installation process does not modify any host-based firewall that may be in use. Your network security team must ensure host and network firewalls are configured to allow inbound/outbound TCP traffic on port 17472.

You can use the Tanium CDT to download the latest client package files.

Linux Distribution Latest Installation Package Files
Amazon Linux 2016.09 TaniumClient-7.2.314.2962-1.amzn2016.09.x86_64.rpm
TaniumClient-6.0.314.1579-1.amzn2016.09.x86_64.rpm
Debian 6.x taniumclient_7.2.314.2962-debian6_i386.deb
taniumclient_6.0.314.1579-debian6_i386.deb
taniumclient_6.0.314.1442-debian6_i386.deb

taniumclient_7.2.314.2962-debian6_amd64.deb
taniumclient_6.0.314.1579-debian6_amd64.deb
taniumclient_6.0.314.1442-debian6_amd64.deb

Oracle Enterprise Linux 7.x TaniumClient-7.2.314.2962-1.oel7.x86_64.rpm
TaniumClient-6.0.314.1579-1.oel7.x86_64.rpm
Oracle Enterprise Linux 6.x TaniumClient-7.2.314.2962-1.oel6.i686.rpm
TaniumClient-6.0.314.1579-1.oel6.i686.rpm

TaniumClient-7.2.314.2962-1.oel6.x86_64.rpm
TaniumClient-6.0.314.1579-1.oel6.x86_64.rpm

Oracle Enterprise Linux 5.x TaniumClient-7.2.314.2962-1.oel5.i386.rpm
TaniumClient-7.2.314.2962-1.oel5.x86_64.rpm
Red Hat / CentOS 7.x TaniumClient-7.2.314.2962-1.rhe7.x86_64.rpm
TaniumClient-6.0.314.1579-1.rhe7.x86_64.rpm
TaniumClient-6.0.314.1442-1.rhe7.x86_64.rpm
Red Hat / CentOS 6.x TaniumClient-7.2.314.2962-1.rhe6.i686.rpm
TaniumClient-6.0.314.1579-1.rhe6.i686.rpm
TaniumClient-6.0.314.1442-1.i686.rpm

TaniumClient-7.2.314.2962-1.rhe6.x86_64.rpm
TaniumClient-6.0.314.1579-1.rhe6.x86_64.rpm
TaniumClient-6.0.314.1442-1.x86_64.rpm

Red Hat / CentOS 5.x TaniumClient-7.2.314.2962-1.rhe5.i386.rpm
TaniumClient-6.0.314.1579-1.rhe5.i386.rpm

TaniumClient-7.2.314.2962-1.rhe5.x86_64.rpm
TaniumClient-6.0.314.1579-1.rhe5.x86_64.rpm

SUSE / OpenSUSE 12.x TaniumClient-7.2.314.2962-1.sle12.i586.rpm
TaniumClient-6.0.314.1579-1.sle12.i586.rpm

TaniumClient-7.2.314.2962-1.sle12.x86_64.rpm
TaniumClient-6.0.314.1579-1.sle12.x86_64.rpm

SUSE / OpenSUSE 11.x TaniumClient-7.2.314.2962-1.sle11.i586.rpm
TaniumClient-6.0.314.1579-1.sle11.i586.rpm
TaniumClient-6.0.314.1442-1.sle11.i586.rpm

TaniumClient-7.2.314.2962-1.sle11.x86_64.rpm
TaniumClient-6.0.314.1579-1.sle11.x86_64.rpm
TaniumClient-6.0.314.1442-1.sle11.x86_64.rpm

Ubuntu 16.04 taniumclient_7.2.314.2962-ubuntu16_amd64.deb
taniumclient_6.0.314.1579-ubuntu16_amd64.deb
Ubuntu 14.04 taniumclient_7.2.314.2962-ubuntu14_amd64.deb
taniumclient_6.0.314.1579-ubuntu14_amd64.deb
Ubuntu 10.04 taniumclient_6.0.314.1579-ubuntu10_i386.deb
taniumclient_6.0.314.1442-ubuntu10_i386.deb

taniumclient_6.0.314.1579-ubuntu10_amd64.deb
taniumclient_6.0.314.1442-ubuntu10_amd64.deb

There are specific Tanium Client installation package files for each supported platform distribution. For example, the package file for Amazon Linux 2016.09 is named TaniumClient-7.2.314.2962-1.amzn2016.09.x86_64.rpm and the package file for Debian 6.x (64-bit) is named taniumclient_7.2.314.2962-debian6_amd64.deb. Notice the letter case of the string TaniumClient or taniumclient. The same letter case is used in the service name.

Install the Tanium Client

  1. Open the Tanium CDT and select Client > Check for Updates to download the latest set of installers.
  2. Go to the <install>\Tanium Client Deployment Tool\clients folder and copy the client installation package file to a temporary location.
  3. Log into the target computer.
  4. Copy the package to a temporary location on the target computer. Be sure to use the Tanium Client installation package file that was developed for the particular Linux distribution.
  5. Execute the appropriate installation command to install the package and generate a default configuration file.

    The rpm installers for Redhat and SUSE have command syntax similar to the following example:

    sudo rpm -i TaniumClient-7.2.314.2962-1.oel6.x86_64.rpm

    The debian installers for Debian and Ubuntu for have command syntax similar to the following example:

    sudo dpkg -i taniumclient_7.2.314.2962-debian6_amd64.deb

  6. Configure basic Tanium Client settings:
    • For Tanium Client 6.0, go to /opt/Tanium/TaniumClient/ and edit the TaniumClient.ini file. Make the following changes.
    • ServerName Tanium Server FQDN or IP address.
      LogVerbosityLevel
      • 0: Disable logging. Recommended for clients installed to sensitive endpoints or VDI endpoints.
      • 1: Recommended logging level during normal operation.
      • 41: Recommended logging during troubleshooting.
      • >= 91: Enable the most detailed log levels for short periods of time only.

      The following is an example TaniumClient.ini file:

      Version=6.0.314.1579
      ServerName=ts1.example.com ServerNameList=ts1.example.com,ts2.example.com
      ServerPort=17472 LogVerbosityLevel=1

      See Troubleshooting for a description of common settings.

    • For Tanium Client 7.2, issue the following commands:
    • cmd-prompt>./TaniumClient config set ServerNameList ts1.example.com,ts2.example.com
      cmd-prompt>./TaniumClient config set LogVerbosityLevel 1
      

      See Reference: Tanium Client CLI for information about using the CLI.

  7. Copy the tanium.pub file from the Tanium Server installation directory to /opt/Tanium/TaniumClient.
  8. Start the Tanium Client service. See Manage the Tanium Client Linux service.

Manage the Tanium Client Linux service

Linux service commands vary according to Linux distribution. This documentation provides examples but is not a reference for each Linux distribution. If you are not already familiar with installing and managing services on your target Linux distribution, please review the documentation for the particular Linux operating system before you begin.

Linux Distribution Example Commands
Amazon Linux service TaniumClient start

service TaniumClient stop

Debian service taniumclient start

service taniumclient stop

Oracle Enterprise Linux systemctl start taniumclient

systemctl stop taniumclient

Red Hat / CentOS systemctl start taniumclient (Version 7)

systemctl stop taniumclient (Version 7)

service TaniumClient start (Version 5, 6)

service TaniumClient stop (Version 5, 6)

SUSE / OpenSUSE service taniumclient start

service taniumclient stop

Ubuntu systemctl start taniumclient (Version 16)

systemctl stop taniumclient (Version 16)

service taniumclient start (Versions 14, 10)

service taniumclient stop (Version 14, 10)

Example: Add Custom Tags to the client installation directory

You can add a Custom Tags file to the client installation directory so that you can use the tags in Tanium workflows. For example, you can create Computer Groups derived from the tags.

Figure  1:  Using Custom Tags to select a Computer Group

To add tags to a client installation directory:

  1. Go to the /opt/Tanium/TaniumClient/Tools directory.
  2. Create a file named CustomTags.txt.
  3. Edit the file (using vi, for example) and add tags. Tags are strings. One string per line. No spaces.
  4. Save the file.

    The following shows a client installation directory that has been set up with a Custom Tag named Lab.

    A restart is not required.

  5. In the Tanium Console, ask a question that uses the Custom Tags sensor or create a Computer Group that selects computers based on the tag, as shown in Figure  1.

You can use the Tanium packages named Custom Tagging - Add Tags and Custom Tagging - Add Tags (Non-Windows) to deploy tags at scale. The results are exactly the same as the manual procedure shown here. For more information, see the Tanium Support Knowledge Base article on Custom Tags (login required).

Uninstall

To uninstall the Tanium Client from RPM-based Linux distributions such as Red Hat or SUSE:

rpm -e `rpm -qa | grep -i TaniumClient`

From Debian-based Linux distributions:

dpkg -P taniumclient

Last updated: 5/22/2018 1:29 PM | Feedback