Release Notes Tanium Client (Version 7.4.1.1955)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Client.
The previous Tanium Client versions can be found here: Release Notes (Version 7.2.314.3584)

Tanium Client 7.4.1.1955

Release Date: February 6, 2020.

Special Notes

• The 7.4 Tanium Client is only compatible with 7.4 and higher Tanium Servers.
• Python v3.8 may require additional anti-virus exclusions in certain environments.
• This Client release encompasses all supported endpoint platforms except AIX and adds support for SLES v15.
• This release of the v7.4 Client marks the end of life of all v6.0 Client versions, which will be September 30, 2020.

Major Features

• A new and extensible version of the Tanium communications protocol: v315 .
• Offer asymmetric client to client communications encryption.
• Root-Key rotation through creation of a new key and revocation of the current key. To learn more about this feature and how to implement, please review our documentation here: Keys Management
• A secured Active/Active Tanium Server setup where private keys do not have to be copied from one server to another.
• Forwarding of Protocol v315 messages within Tanium Client extensions (CXs).
• On-the-wire compression of Sensor Definition and Client Settings messages.
• Support for Python 3.8

New Features

• The Tanium Client now offers a backoff feature when peer connections fail.
• Isolated the python runtime engine from the client via an "in between" dll to make supporting new / updated pythons easier.
• The Tanium Client is now supported on SLES v15 .
• The Tanium Platform components now offer the pki show-registration-fingerpint command line option to allow independent verification of PKI registration keys.

Improvements

• The Tanium Client now implements indexing files to its /Downloads/Cache/ storage. This allows it to read the index only upon start-up and scheduled resets, greatly minimizing the I/O penalty of these operations.
• The Tanium Client will now honor the SensorStringRetentionAgeInMinutes (Client, Numeric) Global Setting, which specifies the maximum amount of time that an endpoint will retain an unused strings.
• The Tanium Client will now take special measures to avoid failing to start up when a Client extension (CX) or its communications channel fail to start up.
• The Tanium Server and Zone Server will now timeout and close inactive client registrations connections.
• The Tanium Client installer will no longer deliver Python libraries and files to the endpoint. These materials will be delivered as content instead.
• TLS encryption on the Tanium Client is now controlled by a single numeric setting: TLSMode which defaults to 1 (which means "required"). The old RequireIncomingEncryption and ReportingTLSMode settings are deprecated starting with the v7.4 client.
• The Tanium Platform components now provide improved component identification of connection error logging for protocol v315.
• Added PKI printing of keys to the Tanium Client through the command line: TaniumClient pki show .

Bug Fixes

• Fixed an issue where a process launched by an action could be left running during a client reset.
• Fixed an issue with the Tanium Client where the /Downloads/ folder could fail to be removed during a necessary reset because the action-manager.db file was being held open.
• Introduced a group of improvements aimed at increasing the efficiency of the Tanium Server while processing file download requests from Tanium Clients; specifically around ChunkRequests for chunks which are no longer hosted in the system.
• The Tanium Client will no longer re-execute failed Actions that actually ran and failed during execution. This is a change in behavior from previous versions of the client which would retry executing the Action command upon failure.
• The Tanium Client installer on Linux Ubuntu will now output proper instructions after installation.
• Fixed an issue in the Tanium Client on the Linux platform where download cache file descriptors would not be closed properly in the deployment of Packages with process groups enforced.
• Fixed an issue in the Tanium Client installer where it would duplicate server names in ServerNameList .
• Improved the tracking of sub-processes spawned off a Sensor or Action so they can be terminated properly when using process group control.

Additional Information

None.

Known Issues and Workarounds

None.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup