Release Notes Tanium Server (Version 7.4.6.1038)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of both a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes (Version 7.4.5.1200)

Tanium Server for Windows and Linux v7.4.6.1038

General Availability Release Date: June 29, 2021.

Special Notes

• Due to security issues against this release of Tanium Server, Tanium strongly recommends upgrading to at least v7.4.6.1080 if you are using this version.
• The Tanium Server now uses Console (Version 2.1.698.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 due to its scheduled End-Of-Life on 2023-10-10.

Security Updates

• This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

New Features

• N/A.

Improvements

• The Tanium Platform now automatically synchronizes the Separated Subnets and Isolated Subnets configured in the Console down to Zone Servers making it unnecessary to configure these by hand using SeparatedSubnets.txt and IsolatedSubnets.txt files. In the unusual case where a ZS requires a different configuration, the central Console settings can be overridden with these local files.
• The Tanium Server's tanium_http_request_duration_seconds_bucket metrics now offer extended buckets up to le="60" seconds counters that offer visibility to request durations beyond the previous 10 seconds.
• Changed the behavior of the Tanium Server's /api/v2/license route to return information about the existing license even when it has expired. This is simply to provide a better UI experience to the Console user.
• The Tanium Server changed the management of Package definitions returned by its API to avoid problems observed with parameters when their underlying definition is changed, which would cause problems in identifying their correspondence to the old definition.
• The Tanium Server now offers live information on PKI updates against Tanium Clients through its pki_tls_cert_requests_issued, pki_tls_root_time_mismatches and pki_tls_stale_roots_skipped metrics.
• The Tanium Server Audit API now includes a human readable audit_name in its output, particularly to benefit users of Connect.
• The Tanium Server has improved its performance in refreshing Group caches, avoiding Console timeouts on systems with large and complex RBAC and Computer Group configurations.

Bug Fixes

• Fixed an edge-case in the renewal of crypto materials between Tanium Clients and Tanium Zone Servers in which endpoint certificate expiration was managed incorrectly when one of the TSs is offline for an extended period of time, causing increased CPU utilization on the endpoint and a constant logging of: Adding certificate: keyRole: TLS in pki0.txt in the Client logs.
• Fixed a bug in the Tanium Server where it would ignore the value for setting max_active_collision_questions when enable_collision_questions=1, which would cause a large barrage of new Questions created when hundreds of string collisions were detected.
• Fixed a broken link presented by the Tanium Server installer where its reference to the SQLCmdLnUtils,msi pointed to a broken Internet link.
• Fixed a bug with the Tanium Server Question Parser where it was failing to quote values that are reserved words. Question text should now be correctly quoted where appropriate; e.g. Computer Name contains "not".
• Fixed a problem with the Tanium Server's API which would return RBACInsufficientPrivilege errors when trying to create Questions and specifying the content_set property for the source of parametrized Sensors.
• Fixed a possible root cause of sporadic Tanium Server crashes on startup.
• The Tanium Server's Package API now reports a source_id as a reference to the original root source from which a Package may have been derived.
• Resolved an issue where deleted users might be recreated by the SAML auto-user provisioning feature.
• Fixed an issue in the way the Tanium Server restores legacy keys from the pki.db of a previous system upon installation. This defect results in v314 clients failing to register when they communicating to a Zone Server on the new system. Legacy Tanium Clients will show in Client Status with Valid Key=No and the Zone Server will log the error: Failed to process server registration certificate request: The root key is revoked.
• Fixed a problem in the Tanium Server installer where it would fail to update the tanium database on PostgreSQL databases with a different locale than English, claiming in the logs that the database "does not have the tanium schema".
• Fixed a bug in the instrumentation of Tanium Server /metrics which resulted in some measures being incorrectly reported as of a cx_message type and also fixed some missing v314 message metrics from info.json files.

Known Issues and Workarounds

• N/A.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup