Succeeding with Deploy
Follow these best practices to achieve maximum value and success with Tanium Deploy. These steps align with the key benchmark metrics: increasing deploy coverage, reducing endpoints missing software updates released over 30 days and mean time to deploy, and optimizing software installed by self service user requests.
Complete the key organizational governance steps to maximize Deploy value. For more information about each task, see Gaining organizational effectiveness.
Develop a dedicated change management process.
Define distinct roles and responsibilities in a RACI chart.
Validate cross-functional organizational alignment.
Track operational metrics.
Increase the client cache size to 2 GB to accommodate package distribution.
Increase the hot cache percentage to 80%.
Install Tanium End-User Notifications. See Tanium End-User Notifications User Guide: Installing End-User Notifications.
Install Tanium Deploy. See Installing Deploy.
Install Tanium Deploy. Configure service account.
If you installed Deploy using the Apply All Tanium recommended configurations option, the service account is automatically set to the account that you used to install Deploy.
Install Tanium Trends. See Tanium Trends User Guide: Installing Trends.
Install Tanium Client Management, which provides Tanium Endpoint Configuration. See Tanium Client Management User Guide: Installing Client Management.
Import the IT Operations Metrics board from the Trends initial gallery. See Tanium Trends User Guide: Importing the initial gallery.
If you installed Trends using the Apply All Tanium recommended configurations option, the IT Operations Metrics board is automatically imported after the Deploy service account is configured.
Create computer groups. See Tanium Console User Guide: Create a computer group.
Additional computer groups might be required to fulfill the requirements of your organization. See Organize computer groups.
Ensure that all operating systems that are supported by Deploy are included in the Deploy action group.
Create an End-User Notifications profile for End-User Self Service. See Tanium End-User Notifications User Guide: Customizing the end-user interface.
Initialize End-User Notifications endpoints. See Tanium End-User Notifications User Guide: Initialize endpoints.
Initialize End-User Notifications endpoints. From the End-User Notifications Home page, click Help , click Support, and then click Initialize Endpoints.
Create a maintenance window that properly overlaps with deployment times and change control process timelines.
Verify that the Computers with Enforced Maintenance Windows chart in the Health section of the Deploy Overview page shows 100% enforcement.
Import software packages from the Predefined Package Gallery or create your own custom packages. See Managing software.
Assign packages to software bundles. See Create a software bundle.
Create a self service profile to include the packages or bundles.
Create a deployment template for quick application of defaults in a deployment. See Create a deployment template.
Create a deployment to install software for each of the supported operating systems in your environment.
Ensure that deployment windows are long enough for endpoints to download and install the software, and properly overlap with maintenance window times.
Use the Make available before start time option for deployments that are set for the future.
If the software requires a restart, use the Restart and Notify User options and set the Duration of Postponement value to less than one day.
See Deploying software.
From the Trends menu, go to Boards and then click IT Operations Metrics to view the Deploy Coverage, Endpoints Missing Software Updates Released Over 30 Days, Mean Time to Deploy Software, and Software Installed by Self Service User Request panels in the Deploy section.
Last updated: 8/3/2021 10:50 PM | Feedback