Requirements

Review the requirements before you install and use Deploy.

Tanium dependencies

In addition to a license for the Deploy product module, make sure that your environment also meets the following requirements.

Component Requirement
Tanium Core Platform

7.2.314.3019 or later

Installing Taniumâ„¢ Interact is also suggested.

Tanium Client

6.0.314.1540 or later

  • Windows 7 Service Pack 1 or later
  • Windows Server 2008 R2 Service Pack 1 or later

7.2.314.3476 or later

  • Windows 7 Service Pack 1 or later
  • Windows Server 2008 R2 Service Pack 1 or later
  • Linux
  • macOS

7.4 or later requires Deploy 1.4.2 or later.

Tanium products

If you clicked Install with Recommended Configurations when you installed Deploy, the Tanium Server automatically installed all your licensed modules at the same time. Otherwise, you must manually install the modules that Deploy requires to function, as described under Tanium Console User Guide: Manage Tanium modules.

Modules at the following minimum versions are required:

  • Tanium End-User Notifications 1.6.5 or later

The following modules are optional, but Deploy requires the specified minimum versions to work with them:

  • Tanium Trends 2.4.4 or later
Computer groups When you first log into the Tanium Console after installing the Tanium Server, the server automatically imports the computer groups that Deploy requires: All Computers.

Tanium Server and Module Server

Deploy is installed and runs as a service on the Module Server host computer. The impact on the Module Server is minimal and depends on usage.

The Tanium Server requires access to the following websites to download binaries for the packages gallery templates.

Software Package Domain Port
7-zip 7-zip.org 443
Adobe Acrobat DC1 download.adobe.com 443
Adobe Acrobat Reader DC download.adobe.com 443
Adobe AIR download.macromedia.com 443
Adobe Digital Editions adedownload.adobe.com 443
Adobe Flash Player fpdownload.macromedia.com 443
Adobe Shockwave EOL2 fpdownload.macromedia.com 443
Box Drive e3.boxcdn.net 443
Citrix Workspace (formerly Citrix Receiver) downloadplugins.citrix.com 443
code4ward GmbH Royal TS download.royalapplications.com 443
DB Browser for SQLite sqlitebrowser.org 443
Dropbox clientupdates.dropboxstatic.com 443
FileZilla download.filezilla-project.org 443
Google Android Studio dl.google.com 443
Google Chrome dl.google.com 443
Google Drive File Stream dl.google.com 443
Microsoft Power BI Desktop downloads.microsoft.com 443
Microsoft Silverlight go.microsoft.com 443
Microsoft Skype Desktop Client *.azureedge.net 443
Microsoft Visual Studio Code code.visualstudio.com 443
Microsoft Windows 10 Upgrade3 content.tanium.com 443
Mozilla Firefox releases.mozilla.org 443
NodeJS nodejs.org 443
Notepad++ github.com 443
Oracle Java Runtime javadl.oracle.com 443
Oracle MySQL Community dev.mysql.com 443
PuTTY the.earth.li 443
VideoLAN VLC Media Player download.videolan.org 443
VMware Workstation Player4 download3.vmware.com 443
Wireshark 1.na.dl.wireshark.org 443
Zoom d11yldzmag5yn.cloudfront.net 443
Zoom Outlook Plugin zoom.us 443

1 Update operation only.

2 Remove operation only.

3 Windows 10 Operating System media is not included in this package gallery template. For more information, see Tanium Community: How to execute a Windows 10 upgrade with Tanium Deploy: Setup.

4 Update and Remove operations only.

For more information about Tanium Server and Module Server sizing guidelines, see Tanium Core Platform Installation Guide: Host system sizing guidelines.

Endpoints

Contact your Technical Account Manager (TAM) for customized tuning to your environment. For more information, see Tanium Platform User Guide: Managing Global Settings.

Table 1:   Supported operating systems
Operating system OS version
Microsoft Windows Server Windows Server 2008 R2 Service Pack 1 or later
Microsoft Windows Workstation

Windows 7 Service Pack 1 or later

macOS

macOS 10.15 Catalina

macOS 10.14 Mojave

macOS 10.13 High Sierra

macOS 10.12 Sierra

OS X 10.11 El Capitan

OS X 10.10 Yosemite

Linux
Amazon Linux 1 or later
Oracle Enterprise Linux 6 or later
Red Hat Enterprise Linux (RHEL) 6 or later

CentOS 6 or later

Windows System environment variables

The use of environment variables when you refer to file paths in Deploy is recommended over the use of explicit file paths. This method provides independence from differing paths based on operating system language or architecture, and allows the construction of a dynamic path at the time of execution.

Process Architecture System Environment Variable Path
32-bit process on 32-bit Windows %PROGRAMFILES% C:\Program Files
%COMMONPROGRAMFILES% C:\Program Files\Common Files
32-bit process on 64-bit Windows %PROGRAMFILES% C:\Program Files (x86)
%PROGRAMFILESX86% C:\Program Files (x86)
%COMMONPROGRAMFILES% C:\Program Files (x86)\Common Files
%COMMONPROGRAMFILES(X86)% C:\Program Files (x86)\Common Files
%COMMONPROGRAMW6432% C:\Program Files\Common Files
%PROGRAMW6432% C:\Program Files

Additional environment variables that are available to the System account, such as %SystemDrive%, %SystemRoot%, %WinDir%, are also supported.

Host and network security requirements

Specific ports and processes are needed to run Deploy.

Ports

The following ports are required for Deploy communication.

Component Port Direction Purpose
Module Server 17463 Loopback Internal purposes; not externally accessible

Security exclusions

If security software is in use in the environment to monitor and block unknown host system processes, your security administrator must create exclusions to allow the Tanium processes to run without interference.

Table 2:   Deploy security exclusions
Target device Process
Module Server <Module Server>\services\deploy-service\node.exe
Windows endpoints <Tanium Client>\Python27\TPython.exe (7.2.x clients)
<Tanium Client>\Python38\TPython.exe (7.4.x clients)
<Tanium Client>\Python38\*.dll (7.4.x clients)
<Tanium Client>\Tools\SoftwareManagement\py\deploy\tools\active-user-sessions.exe
<Tanium Client>\TaniumCX.exe
Linux endpoints <Tanium Client>/python27/python (7.2.x clients)
<Tanium Client>/python38/python (7.4.x clients)
<Tanium Client>/TaniumCX
Mac OS endpoints <Tanium Client>/python27/python (7.2.x clients)
<Tanium Client>/python38/python (7.4.x clients)
<Tanium Client>/TaniumCX

User role requirements

Deploy uses RBAC permissions that control access to the Deploy workbench. The predefined roles are Deploy Administrator, Deploy Service Account, Deploy Package Administrator, Deploy User, and Deploy Read Only User.

Table 3:   Deploy user role permissions
Permission Deploy Administrator Deploy Service Account Deploy Package Administrator Deploy User Deploy Read Only User

Show Deploy

View the Deploy workbench


1

1

1

1

1

Deploy Use Api

Perform Deploy operations using the API


1

1

1

1

1

Deploy Module Read

Read access to the Deploy module







Deploy Module Write

Write access to the Deploy module







Deploy Settings Write

Write access to global settings in the Deploy module







Deploy Deployments Write

Create and modify deployments







Deploy Maintenance Windows Write

Create, modify, and delete maintenance windows







Deploy Profiles Write

Create, modify, and delete self service profiles







Trends Integration Service Account2

Access for Deploy service accounts to read and write data, and to define sources and boards for Deploy content set







Trends Api Board Read2

View boards, sections, and panels for Deploy content set







Trends Api Board Write2

Create, edit, delete, and configure boards, sections, and panels for Deploy content sets







Trends Api Source Read2

View and list sources for Deploy content set







Trends Api Source Write2

Create, edit, and delete sources for Deploy content set







Trends Data Read2

Run data queries against sources for Deploy content set







Trends Import2

Import from file or gallery






1 Denotes a provided permission.

2 Denotes a permission when Trends 2.4.4 or later is installed.

Table 4:   Provided Deploy Micro Admin and Advanced user role permissions
Permission Role Type Content Set for Permission Deploy Administrator Deploy Service Account Deploy Package Administrator Deploy User Deploy Read Only User
Read User Group Micro Admin  
Read Computer Group Micro Admin  
Ask Dynamic Questions Advanced  
Read Sensor Advanced Reserved
Read Sensor Advanced Default
Read Sensor Advanced Base
Read Sensor Advanced Deploy Content Set
Read Action Advanced Deploy Content Set
Read Action1 Advanced End-User Notifications
Write Action Advanced Deploy Content Set
Write Action1 Advanced End-User Notifications
Approve Action Advanced Deploy Content Set
Execute Plugin Advanced Deploy Content Set
Execute Plugin2 Advanced Trends
Read Package Advanced Deploy Content Set
Read Package1 Advanced End-User Notifications
Write Package Advanced Deploy Content Set
Read Saved Question Advanced Deploy Content Set
Read Saved Question1 Advanced End-User Notifications
Write Saved Question Advanced Deploy Content Set
Write Saved Question1 Advanced End-User Notifications

1 Denotes a provided permission when the Tanium End-User Notifications shared service is installed.

2 Denotes a provided permission when Tanium Trends 2.4.4 or later is installed.

For more information and descriptions of content sets and permissions, see the Tanium Core Platform User Guide: Users and user groups.