Release Notes Client Management (Version 1.10)

Tanium Client Management 1.10.289

Release Date: November 1, 2022

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.6.268
• Client Management now only supports Tanium Platforms 7.4.3.1204 and higher
• If using the Tanium Client setting StateProtectedFlag=1, Client Management 1.9.925 or higher must be installed and distributed before upgrading to the Tanium Client 7.4.8.1042 or higher version.
• Because Client Management now uses Tanium RDB, and migrates data on upgrade, contact Tanium before any attempt to uninstall and wipe Client Management or Endpoint Configuration to reinstall a previous version.

Improvements

• Upgraded various third-party libraries to newer versions

Security Update

• This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM

Tanium Client Management 1.10.286

Release Date: October 18, 2022

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.6.268
• Client Management now only supports Tanium Platforms 7.4.3.1204 and higher
• If using the Tanium Client setting StateProtectedFlag=1, Client Management 1.9.925 or higher must be installed and distributed before upgrading to the Tanium Client 7.4.8.1042 or higher version.
• Because Client Management now uses Tanium RDB, and migrates data on upgrade, contact Tanium before any attempt to uninstall and wipe Client Management or Endpoint Configuration to reinstall a previous version.

Improvements

• When using Wipe and Reinstall on a macOS endpoint, the Universal binary Tanium Client will be used on reinstall if appropriate to the endpoint.

Bug Fixes

• Resolved an issue that could result in the tanium-init.dat in being corrupted.
• Endpoint Configuration: Resolved an issue that could result in a CX module not being loaded properly

Tanium Client Management 1.10.279

Release Date: September 27, 2022

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.6.265
• Client Management now only supports Tanium Platforms 7.4.3.1204 and higher
• If using the Tanium Client setting StateProtectedFlag=1, Client Management 1.9.925 or higher must be installed and distributed before upgrading to the Tanium Client 7.4.8.1042 or higher version.
• Because Client Management now uses Tanium RDB, and migrates data on upgrade, contact Tanium before any attempt to uninstall and wipe Client Management or Endpoint Configuration to reinstall a previous version.

Enhancements

• Client Management and Endpoint Configuration now use the Tanium RDB shared service for storing data.
• Client Management and Endpoint Configuration now use the Tanium System User Service shared service for managing its service account.
• Client Management now uses the Tanium Secrets shared service for storage of deployment configuration passwords.
• It is now possible to schedule Tanium Client deployments based on Discover scans.
• The Tanium Client macOS universal binary is now the default client for macOS, and is supported for deployments and upgrades.
• Tanium Client deployments and upgrades now use the same source for the client binary files, allowing client .zip files that are uploaded on the Client Versions page. This feature will be used going forward to upload files for deployments in airgapped environments.
• Endpoint Configuration: Configuration change auditing has been enhanced, and now includes a workbench view for audit entries.
• Endpoint Configuration: Improved the performance of the ECF CX configuration database on the endpoint.

Improvements

• The Upgrade Log sensor has been removed from the solution.
• Improved the logging of the client profile service.
• Quicklinks have been added for Client Versions, Client Upgrades and Endpoint Configuration.
• Improved guidance on when to use Client Upgrades functionality vs Client Deployment with option to install a higher version.
• Changed the default recommended value for VDI sensor delay to 20 seconds.
• Endpoint Configuration: Client Extensions - Installed Extensions sensor now includes installed but disabled extensions.
• Endpoint Configuration: Enhanced options for when ECF packages should ignore action lock.
• Endpoint Configuration: Packages now include improved management of extensions, including to allow restarting client extensions and for uninstalling, blocking, unblocking, or reinstalling all extensions at one time.
• Endpoint Configuration: Improved detection of configurations that are equal, reducing the changes required for ECF manifests.
• Endpoint Configuration: Endpoint targeting is now based on Tanium Client Architecture, a compile time value, instead of OS parameters.
• Endpoint Configuration: Improved information provided in support bundle.
• Endpoint Configuration: The workbench now displays the current manifest revision version.
• Endpoint Configuration: Configuration descriptions are now included in the audit information sent via Connect plugin.
• Endpoint Configuration: Added sensor Endpoint Configuration - Tools Retry Status sensor to retrieve information about tool install status.
• Endpoint Configuration: Improved automated cleanup of older configurations in the ECF database.
• Endpoint Configuration: Improved security posture and verification for TaniumCX and CX components on installation and execution.
• Endpoint Configuration: Improved the CX extensions management of low disk space scenarios, unifying behavior in these scenarios.
• Endpoint Configuration: Endpoint Must Gathers now include additional information, like the date the gather was collected and system OS information.
• Endpoint Configuration: Support bundles now includes a file with mapping between sensor ID and Sensor names for easier identification.
• Endpoint Configuration: Improved the metrics available on the endpoint via CX
• Endpoint Configuration: Performance has been improved for noticing and responding to CX mailbox commands.
• Endpoint Configuration: It is now possible to generate an Endpoint Must Gather directly on the endpoint via command line on Windows, Linux, Mac, AIX, and Solaris.

Bug Fixes

• In configuration of ssh key based connections, the key passphrase field is now masked.
• Resolved an issue where an additional "," could be appended to the end of the ServerNameList during deployments.
• Resolved an issue where a custom ServerPort value should be used, but is not included in the generated tanium-init.dat.
• Resolved an issue where the result buckets were not grouped properly in a client deployment.
• Resolved an issue where sorting on some columns while viewing Client Versions could corrupt the workbench.
• Resolved an issue where the Client Management service could echo some logging lines to the OS's service manager instead of a log file.
• Resolved an issue where the tanium-init.dat could sometimes not be generated because of permission issues.
• Resolved an issue where an upgrade deployment could be created unintentionally by clicking the wrong link on the upgrade deployment creation pages.
• Resolved an issue with setting the service debugging level.
• Resolved an issue with client upgrades where the mailbox call to download the client might fail.
• Resolved an issue where custom proxy settings could not be used because of parameter validation on the field.
• Resolved an issue where a user with proper privileges should be able to download the Tanium Client install bundle.
• Resolved an issue where updating a client configuration could result in an older tanium-init.dat being used.
• Resolved an issue where colons could not be used in Custom Tags.
• Resolved an issue where a deployment could fail based on the MOTD value on some Linux distributions.
• Resolved an issue that could cause the overview charts not to load.
• Endpoint Configuration: Resolved an issue where the settings page was not correctly validating values.
• Endpoint Configuration: Resolved an issue where configuration modification dates would update when no changes had occurred.
• Endpoint Configuration: Addressed some inconsistencies between privileges used in Tanium Cloud and onprem.
• Endpoint Configuration: Addressed incorrect descriptions of several sensors.
• Endpoint Configuration: Resolved an issue where timeouts could occur when collecting an Endpoint Must Gather.
• Endpoint Configuration: CX components now limit connections to sqlite databases to a single connection.
• Endpoint Configuration: Resolved an issue where the extensions-stdout.txt file would not rotate reliably
• Endpoint Configuration: Active configuration profiles will now be removed when a machine moves out of all active profiles.
• Endpoint Configuration: Resolved an issue that could occur when the configuration targeting a profile was very complex.
• Endpoint Configuration: Resolved an issue that could occur to hang the CX processes if a file delete failed.
• Endpoint Configuration: Resolved an issue where the Index CX was not allocated the correct amount of CPU time.

Security Update

• This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM.