Release Notes Client Management (Version 1.8)

Tanium Client Management 1.8.185

Release Date: December 14, 2021

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.5.255

Bug Fixes

• Increased timeouts for installation to avoid issues in low resource, high latency environments.

Tanium Client Management 1.8.182

Release Date: November 30, 2021

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.5.252

Bug Fixes

• Fixed an issue that prevented import on Tanium Server 7.3

Tanium Client Management 1.8.181

Release Date: November 16, 2021

Important Notes

• This version of Client Management includes Endpoint Configuration version 1.5.252

Enhancements

• Added Client Profiles, for managing Tanium Client settings.
• Added support for macOS universal binary Tanium Client and Amazon Linux 2 ARM Tanium Client.

Improvements

• On Tanium Server 7.5.2 and higher, client settings will be added to tanium-init.dat files in client bundles automatically.
• Upgraded tsdb-cx to 1.1.0.
• The default concurrent installations has been changed from 5 to 20.
• The Client Management service now uses a better database synchronization model, trims older deployments from the database, and should use less space and disk IO.
• The Python runtime has been removed as a dependency of Client Management.
• Python runtime is no longer a requirement of Client Management, and will not be distributed by Client Management directly. Modules that use Python will continue to distribute runtime as required.
• Endpoint Configuration: An error icon will now appear on items sent by modules that ECF is unable to fully define.
• Endpoint Configuration: When ECF Approvals are in use, the module-side banner will now display as a Warning (yellow) instead of an Error (red) banner.
• Endpoint Configuration: ECF now manages the "Client Configuration and Support" actions internally instead of importing them during installation.
• Endpoint Configuration: ECF will show an error banner on the Configurations page when it encounters an item that has incorrect targeting.
• Endpoint Configuration: Adds Audit Logging when ECF does work on Manifest items.
• Endpoint Configuration: ECF Service Logging is now in GMT to match other ECF logging.
• Endpoint Configuration: Adds Targeting Question Text or a clickable Group link when available to each Configuration Item's preview.
• Endpoint Configuration: Improves the speed of reading and writing to ECF's database for large customers.
• Endpoint Configuration: Improves log messages when modules send items to ECF.
• Endpoint Configuration: Removed ambiguity when displaying ECF Configuration Item ordering.
• Endpoint Configuration: Adds CoreCX, ConfigCX, and SupportCX support for Amazon Linux ARM.
• Endpoint Configuration: Adds CoreCX, ConfigCX, and SupportCX support for MacOS ARM (M1).
• Endpoint Configuration: Adds a tooltip "info icon" to the Tools page to indicate this data is cached from TDS.
• Endpoint Configuration: Don't display CRUs from TDS when showing the Tools page.
• Endpoint Configuration: Changed the label on the Tools page to be more descriptive.
• Endpoint Configuration: Shows "Update At" column on Configuration page.
• Endpoint Configuration: Adds an "Endpoint Configuration Read-Only User" role. Existing RBAC roles are added to users to allow access to Interact as needed. Additional Content Sets for other modules are still granted on an as-needed basis to users.
• Endpoint Configuration: Changes to the Bootstrap Scheduled Actions in settings now cause ECF to re-create them immediately.
• Endpoint Configuration: Adjusts targeting of "Deploy Client Configuration and Support [Windows]" to only *Windows OS Major Version > 6.0* ( Server 2008R2 [6.1] and higher )
• Endpoint Configuration: Adds the "Wait Time" setting for the "Client Configuration and Support" actions.
• Endpoint Configuration: Adds new logging capabilities in TaaS.
• Endpoint Configuration: Removes Workbench Show from approve/reject/dismiss privileges for Patch. Workbench access must be granted separately now.
• Endpoint Configuration: Corrects the existing "Endpoint Configuration Administrator" role to include Content Sets and needed sensors for operation of ECF. Existing RBAC roles are added to users to allow access to Interact as needed. Additional Content Sets for other modules are still granted on an as-needed basis to users.
• Endpoint Configuration: Adds TDS Read Privs to new ECF Roles to display the ECF Tools page.

Bug Fixes

• Fixed an issue with selecting "All" on individual domain when selecting items to Gather via DEC.
• Fixed an issue where TCM service settings page and server side support collection buttons were visible.
• Fixed an issue with install.bat in downloaded Windows client package on 32-bit Windows endpoints.
• Fixed an issue where missing secrets on disk resulted in an unhandled error.
• Fixed an issue where the check for available space on Linux did not check the correct filesystem depending on location of symbolic link.
• Fixed an issue were if a value was not filled in within the UI, a ineffective error message was shown.
• Fixed an issue where a failure to transfer files was assigned to the wrong failure bucket.
• Fixed an issue where tags with periods did not apply correctly.
• Fixed an issue with RBAC when using TCM with Trends and DEC.
• Fixed an issue where a client setting could not be unset.
• Fixed an issue where the tanium-init.dat would not be included in the client .zip package if a hostname in the ServerNameList was included twice.
• Fixed an issue where switching between tabs on the remote Must Gather page would leave items on other tabs checked.
• Endpoint Configuration: Fixed an issue where multiple ECF Tools DoT settings may be present.
• Endpoint Configuration: Fixed an issue that prevented ECF from fully deleting Configuration Items, preventing database cleanup routines.
• Endpoint Configuration: Fixed a visual issue when opening the settings page and displaying the visible settings tabs.
• Endpoint Configuration: Fixed a display issue in the module banner counting when using ECF Approvals to indicate how many approvals are pending.
• Endpoint Configuration: Improves the quick filters on the ECF Tools page.
• Endpoint Configuration: Fixed a wait time issue in the "Reset Components" package that might cause the Tanium Client to not restart.
• Endpoint Configuration: Updated column names in the Tools workbench to "Status" and "Installations"
• Endpoint Configuration: Fixed an issue with null descriptors that might prevent modules from updating existing items.
• Endpoint Configuration: Blocked Tools are now correctly counted in the Tools workbench without version numbers.
• Endpoint Configuration: Fixed an issue that displayed an error banner when the user didn't have RBAC to view approvals.
• Endpoint Configuration: Fixed an issue that deleted more items than were visually represented and counted if using the "Select All" checkbox in the Configurations grid.
• Endpoint Configuration: Fixed an issue with hover displays not using alternating colors for grid rows.
• Endpoint Configuration: Corrected the links on the ECF homepage to point to the correct Release Notes page on kb.tanium.com
• Endpoint Configuration: Fixed an issue from early ECF installs that may not have correct Approval Transaction Item tracking keys.
• Endpoint Configuration: Sets upper limits on Endpoint Configuration settings to avoid invalid platform settings.
• Endpoint Configuration: Fixed an issue where the Log Level selector would span the entire page width.
• Endpoint Configuration: Fixed an issue that may change the unit selector when scrolling in the settings page.
• Endpoint Configuration: Fixed an issue when changing Bootstrap options to watch and change the scheduled actions quicker.
• Endpoint Configuration: Fixed an issue where a ReadOnly user could see Approve and Reject buttons for certain Configuration Items, but is not capable of using them.
• Endpoint Configuration: Fixes and improves audit log messages for all audit types.
• Endpoint Configuration: Adds the LimitNOFILE setting to service file