Select a targeting method, and enter a list of IP addresses or computer names, an IP or CIDR range, or a Discover label. For information about configuring Discover labels, see Tanium Discover User Guide: Labels.

To define an additional target for the deployment, click Add Target. To remove a target, click Delete .

Add credential sets to try for the targeted endpoints. Each credential set is saved as a separate item that you can update at a later time as necessary.

• If you are targeting Windows endpoints, configure each Windows credential combination to be tried during the deployment.

  1. Click + Windows Credential.
  2. Enter a Name for the credential set.
  3. Enter the Username and, as necessary, the Domain and Password for the account.
  4. Click Save.

• If you are targeting non-Windows endpoints, configure each non-Windows credential combination to be tried during the deployment.

  1. Click + Non-Windows Credential.
  2. Enter a Name for the credential set.
  3. Enter the Username and, as necessary, the Domain, Password, SSH Key, and Keyphrase for the account.

     If you are using an SSH key, the private key is required in PEM format. Copy the contents of the PEM-formatted private key, paste the contents in the SSH Key field, and enter the passphrase in the Keyphrase field. When you use an SSH key for authentication, a user name is required, and a password is optional. However, endpoints typically still require a password for non-root users, unless the specified user is configured to use sudo without a password.

  4. Click Save.

For specific requirements for authentication and permissions, see Account permissions for Client Management.