IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Comply (Version 1.3.0)
Tanium Comply 1.3.0
Release Date: June 21, 2017
Feature Improvements
- Added the ability to export Comply reports in CSV and HTML format with a variety of options.
- Added the ability to import benchmark zip files in bulk via the Import Benchmark dialog.
- Added the ability to grant a user Question Author role and allow them read-only access to the Comply module. Read-only users can see only computers that belong to computer groups to which the user has access.
- Added support for JOval 5.11.2-SR2.
- Added the ability to specify the AND/OR operator on report targeting.
- Added the ability to manage/regenerate the JRE decryption key.
- Added the ability to filter report results by report platform.
- Added display of the benchmark version to report result metadata.
- Added the ability to specify custom rule titles for rules whose values have been customized. The new title will display in the UI, question results, and report export results.
For more information on which versions of CIS-CAT, jOval, and SCC are supported, see Comply Supported Engines.
Bug Fixes
- Fixed an issue where Comply could not be uninstalled from the primary in an A/A environment.
- Fixed an issue where aggregate polling would poll forever (until browser tab was closed).
- Fixed an issue with permissions on 7za.exe when upgrading Comply.
- Fixed a minor console error when displaying vulnerability report results.
- Fixed an issue where the profile name was not shown on a report using a custom profile.
- Fixed an issue where SCC vulnerability scanning was failing vulnerability content validation.
- Fixed an issue where supported benchmarks were being listed as unsupported.
- Fixed a UI rendering issue that resulted in the right side menus being drawn behind the filter widget.
- Renamed benchmark "tags" to benchmark "labels" for consistency with other Tanium modules.
- Fixed an issue where the CIS-CAT link (and example bundle file name) were incorrect after CIS-CAT's web site redesign.
- Fixed an issue where scheduled "Remove Stale Report" action would not start.
- Fixed an issue where user could select multiple profiles of the same benchmark within a single report.
- Fixed an issue where CVE URL's were causing redirects.
- Made the multiple select on deployment creation more intuitive.
- Fixed an issue where stdout and stderr were not being properly logged during scans on Linux.
- Made Linux custom checks case insensitive to prevent issues with report result reporting.
- Added the deployment identifier to Comply Tools actions to help identify the deployment to which the action is associated.
- Added display of an error message on deployment cards when there is a JRE key mismatch.
Known Issues
- Tanium Comply does not support any benchmarks that require authentication.
- Endpoint computers with less than 2GB of installed RAM may not have enough free memory to run the CIS-CAT engine when evaluating CIS checklists.