Managing the Tanium license

The Tanium™ license file (tanium.license) enables the entitlements for your deployment, such as the Tanium solutions that you can use. Tanium Cloud automatically manages the license. Contact Tanium Support to makes changes to the license, such as adding solutions or increasing the maximum number of managed endpoints (see Contact Tanium Support).

The Administrator reserved role is required to see and manage the Tanium license.

License expiration

The Tanium license validity period starts when Tanium generates the license, regardless of when your organization activates it. Tanium Cloud Management Portal (CMP) notifies you Console shows a warning when the Tanium license will expire within 30 days, but only if you sign in as a user who is assigned the Administrator role. Your Tanium or partner account team will contact the procurement department of your organization well before the license expires to start the renewal process. If the license expires before it is renewed, you cannot access Tanium Cloud. If the license expires only for a particular solution, that solution becomes unavailable.

You can configure CMP to send you email notifications when a module license is about to expire. See Tanium Cloud Deployment Guide: Subscribe to email notifications.

Maximum number of managed endpoints

Tanium Cloud identifies each endpoint by its fully qualified domain name (FQDN) to determine if the number of managed endpoints is within the maximum that the license specifies. Tanium Cloud considers an endpoint to be managed if its Tanium Client has registered in the past 30 days. Tanium Console displays a warning when client registrations exceed the licensed maximum. For the current tally of managed endpoints, see View managed endpoints count for license compliance.

If the license expires, you cannot import, export, or update any Tanium solutions. The following user guides list additional effects of license expiration. After you upload a new license, full functionality is restored for all solutions.

View license details

From the Main menu, go to Administration > Configuration > Tanium License. This page shows most of the details about your Tanium license, including:

Maximum number of managed endpoints:

To determine license compliance, the Tanium Server identifies each endpoint by its fully qualified domain name (FQDN). The server considers an endpoint to be managed if its Tanium Client has registered in the past 30 days. Tanium Console displays a warning when client registrations exceed the Maximum Managed Endpoints. For the current tally of managed endpoints, see View managed endpoints count for license compliance.
License validity period:

The page displays the license Duration, Days Left, and (for each solution) the Start Date and Expiration Date.
Licensed solutions:

The grid displays entitlements for each Tanium solution. A zero indicates solutions that are not licensed.

(Optional) To see all the IP addresses and FQDNs that the license authorizes for accessing Tanium Console:

Enter https://<tanium_server>/info in your browser URL field, where <tanium_server> is the Tanium Server FQDN or IP address.
Sign in as a user who is assigned the Administrator reserved role.
See the licensed_server_name setting.

Replace the license

Use the Tanium License page to apply a new license if the current one expires soon or your entitlements change.

In an active-active deployment, replace the license on each Tanium Server in case one server becomes unavailable for a long time.

Contact Tanium Support to obtain a new license (see Contact Tanium Support). You must provide the FQDNs or IP addresses of the physical or virtual devices that host your Tanium Servers.
Copy the new license to a location that is accessible from the system that you use to access Tanium Console.
(Optional) Back up the current license. The steps depend on the infrastructure of your Tanium Core Platform:
- Windows: Go to the Tanium Server installation directory and rename the current Tanium license.
  Include the current date in the file name (such as tanium.license_2022-02-30) in case you repeat this procedure at a later date.
- Tanium Appliance: To run an automatic or manual backup, see Tanium Appliance Deployment Guide: Backing up and recovering Tanium Appliances.
From the Main menu, go to Administration > Configuration > Tanium License.
Click Upload, select the new license file, and click Open.
The Tanium Server automatically activates the new license after a few minutes.

Troubleshoot license issues

The following table lists alerts and common issues related to the Tanium license. If conditions trigger an alert, Tanium Console displays it whenever you sign in. The listed corrective actions are independent options to consider, not sequential steps.

You can also see the alerts in the Tanium Server logs. See Tanium Core Platform Deployment Reference Guide: Server logs.

Table 1: Tanium license alerts and common issues
Issues and alerts	Corrective actions
Common issue: Tanium features unavailable Some Tanium features that you expected to access are unavailable. This might happen if you: Activated the wrong license. Accessed the wrong Tanium Server. Renamed or moved the license file. Did not wait for long enough (one minute) for the license to activate after you replaced the license.	Verify that your license authorizes the expected features. In the Tanium License page, the Solution grid shows zero Maximum Managed Endpoints for features that are not licensed. See View license details. (Windows infrastructure only) Verify that the license file has the correct name (tanium.license) and is in the Tanium Server installation directory. Restart the Tanium Server service to activate the license immediately: Tanium Appliance: See Tanium Appliance Deployment Guide: Start, stop, and restart Tanium services. Windows Server: See Tanium Core Platform Deployment Guide for Windows: Manage Windows services for core platform servers.
Common issue: higher than expected managed endpoints count The Administration > Configuration > Client Status page might display a higher than expected number of managed endpoints for several reasons: The Tanium Server counts each distinct FQDN as one managed endpoint. Computer names such as computer_name and computer_name.some_company.com might represent the same endpoint but produce two FQDNs. Older versions of the Tanium Client might intermittently report both FQDN names and non-FQDN names, and report localhost or null as managed endpoints. Non-persistent virtual machines might instantiate with unique names whenever they are initialized, which can inflate the count of managed endpoints.	If necessary, contact Tanium Support about replacing the Tanium license with one that supports more managed endpoints (see Contact Tanium Support). In the Administration > Configuration > Client Status page, if the Filter by Client Version section includes version 0.0.0.0, clear the check box for that version. Version 0.0.0.0 is an artifact that the Tanium Server excludes from the managed endpoints tally.
Alert: license expired Tanium Console displays an alert indicating the number of days since the license expired. See License expiration.	Replace the license.
Alert: Maximum Managed Endpoints exceeded If the number of managed endpoints exceeds the Maximum Managed Endpoints in the license, Tanium Console displays a warning and indicates the current number of managed endpoints. If the count exceeds the maximum by more than 10 percent, Console also directs you to contact Tanium Support.	Contact Tanium Support for a new license that supports more managed endpoints and then Replace the license.