Provisioning endpoints

1. Configure PXE settings if needed.

2. From the Provision menu, click Provision Endpoints and then click Create Provision Endpoint.

   You can also click Create Provision Endpoint from the Quick Links section of the Provision Overview page.

3. In the Satellite Endpoints section, select one or more satellites or click Create Satellite to create one in Direct Connect. For more information, see Tanium Direct Connect: Create satellites.

4. In the Features section, select Preboot Execution Environment (PXE).

   Content Caching is automatically selected for PXE endpoints. You can create a Provision Endpoint with only Content Caching selected, but content caching by itself is useful only when a Provision Endpoint is located in a cloud-hosted environment or a DMZ (edge endpoint) where you need access to the content but are not able to PXE boot.

5. In the OS Bundles section, select one or more OS bundles and then click Save and Deploy Now.

To initiate the PXE network boot process, select one or more keys during the device power-on sequence, which vary by manufacturer. For example, on a Lenovo device, you must select the Enter key and then F12 to get to a boot menu where you can choose the PXE boot (IPv4) option.

1. From the boot menu, click Wipe.
2. Select the number of passes. You can configure 1-25 passes.
3. To shut down the system after the wipe is complete, select the Shutdown when complete option.

   To display a summary screen after the wipe is complete, do not select this option.

1. Open a command prompt and navigate to the folder that contains the USBKey.ps1 script, such as C:\Users\Administrator\Documents\utility\USBKey.
2. Choose which option you want to run the USBKey.ps1 script:
   • If you want to get the USB content from the Tanium PXE server at the specified IP address and write that content to the USB key at the specified drive, run the script with the -TPXEHost and -Destination parameters. For example:

     Powershell.exe -ExecutionPolicy Bypass -File .\USBKey.ps1 -TPXEHost 10.1.2.3 -Destination D:

   • If you want to get the USB content from the Tanium PXE server at the specified IP address and write that content to the ISO at the specified drive, run the script with the -TPXEHost and -Destination parameters and specify the ISO file name. For example:

     Powershell.exe -ExecutionPolicy Bypass -File .\USBKey.ps1 -TPXEHost 10.1.2.3 -Destination C:\Media.iso

   • If you want to get the USB content from the Tanium PXE server at the specified IP address, but configure the USB key to pull the content from an alternate IP address during the boot process, run the script with the -TPXEHost, -AnchorHost, and -Destination parameters. For example:

     Powershell.exe -ExecutionPolicy Bypass -File .\USBKey.ps1 -TPXEHost 10.1.2.3 -AnchorHost 10.1.5.1 -Destination D:

   • If you want to specify the BundleID of the bundles to include on the USB media, run the script with the -TPXEHost, -Destination, and -Bundles parameters. You can find the BundleID in View OS bundle details. For example:

     Powershell.exe -ExecutionPolicy Bypass -File .\USBKey.ps1 -TPXEHost 10.1.2.3 -Destination D: -Bundles 1,2,3

     If any of the OS bundles that you specify includes an ODJService or AdminPassword setting, the script returns the following error: Bundle requires network connectivity to a Tanium PXE server. Specify -Force to generate the media anyway. To generate the media anyway, specify the -Force parameter. When you deploy with this media, if network connectivity is not established, then the ODJ and admin password logic is bypassed, so the computer ends up in a workgroup. The local Administrator account is enabled with the password set to **restricted**-%serial% where %serial% is replaced with the serial number of the machine.

     For isolated endpoints without network connectivity, using OS bundles that include an ODJService or AdminPassword setting is not supported. For more information, see Error: [ERR_INVALID_URL]: Invalid URL.

3. The script reformats and labels the USB key with a default label of PROVISION and then downloads the required boot files from the specified PXE server. After the script finishes, eject the USB device and use it to boot a physical device.

1. Create an OS bundle if needed.
2. From the Provision menu, click OS Refresh Deployments and then click Create OS Refresh Deployment.

   You can also click Create OS Refresh Deployment from the Quick Links section of the Provision Overview page.

3. In the Deployment Overview section, enter a name and optional description.
4. In the Deployment Details section, configure the following details.
   1. For Content to deploy, select a bundle.
   2. For Endpoints to target, choose the targeting criteria: computer groups, filter question, or computer names.
   3. (Optional) For Deployment type and schedule, review the details and click Edit if you need to make any changes.
5. Click Preview To Continue, review the Deployment Preview details, and then click Deploy.

To edit an OS refresh deployment, select a deployment and then click Edit .

1. From the Provision menu, click OS Refresh Deployments.
2. To view deployment progress, choose one of the following options.
   1. (Optional) To view the Deployment Progress on Endpoints, click Expand next to a deployment.
   2. (Optional) To view additional Status and Deployment Details, click the name of a deployment.

   You can also click each of the Running, Complete, or Failed statuses to view additional details in Interact.

To view PXE endpoint details on the Provision Endpoints page, click Additional Data next to the endpoint.

1. From the Provision menu, click Provision Endpoints.
2. Select one or more endpoints and then click Delete .