Release Notes Tanium Server (Version 7.5.6.1067)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of both a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes (Version 7.5.5.1210)

Tanium Server for Windows and Linux v7.5.6.1067

General Availability Release Date: March 7, 2023.

Special Notes

• This version of Tanium Server shipped with: Console (Version 3.4.51.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 due to its scheduled End-Of-Life on 2023-10-10.

Security Updates

• N/A.

New Features

• Added support for upgrading the Tanium Modules Server's RDB PostgreSQL database, with migration logic, to PostgreSQL 12 in Windows Tanium environments.
• The Tanium Server now allows for module privileges to be applied before the workbench is installed to improve the solution installation process and support ongoing Tanium Module Server improvements.
• Added installation check to validate python 2/3 binaries are installed to support upgrades to newer distributions for TanOS and Tanium Cloud installations.
• Tanium components now ship with libexpat version 2.5.0.

Improvements

• The Tanium Server and Tanium Module Server now ship with PostgreSQL 12.
• The Tanium platform now evaluates SensorStatistic for sensor execution count limits.
• The Tanium Server now handles routes with a ui/ prefix to support sharing of Console links.
• When utilizing the import/export feature, Tanium will not export single-use Scheduled actions that have expired.
• The Tanium Server now issues user state and login metrics: tanium_authenticator_users_current and tanium_authenticator_users_last_login.
• The Tanium Server now ships with a default of 2048MB for the ClientCacheLimitInMB client setting.
• The Tanium Server now ships with higher default bandwidth throttle settings. New installs will be configured as Global Throttle for Package Files: 800Mbps with 1,600 Connections, providing a minimum of 0.5Mbps per download connection. and Global Throttle for Sensors: 160Mbps with 40 Connections.
• Extended the allowed length for trusted IP addresses for API tokens so fewer API keys need to be generated and maintained.
• The Tanium server now exposes console_consoleColor and console_headerText system settings in Tanium Cloud so they can be modified by users.
• The console_PreLoginBannerHTML setting to offer a pre-login banner is now exposed to users in Tanium Cloud environments.
• The Tanium Server now allows Tanium Cloud customers to add a login banner to their server through the web console.
• The REST PATCH requests to the Tanium Server patch API route now provide more granular Server-Timing information.

Bug Fixes

• Resolves an issue with certificate encoding. Tanium PKI certificates now align with industry standards more thoroughly.
• Resolves an issue where the Tanium Server may be overwritten by an older version. The Tanium Server now blocks installation on top of an newer version of the platform.
• Resolves an issue on Windows Tanium Server installations where certain drill-down questions result in an ODBC error.
• Resolves an issue where audit log entries are missing details on events where roles, user groups or personas modified.
• Resolves an issue with management rights groups that are created without a name, typically only created by modules, will not return correctly when queried via REST API.
• Resolves an issue in Active/Active environments with custom packages that are moving at least one Tanium Server to a new server. Packages with local files are now transferred correctly to the new Tanium Server.
• Resolves an issue where modules may not function after upgrades in environments where the RDB content set has been deleted and the RDB solution has been reinstalled.
• Resolves an issue when during content import where the Tanium Server does not honor the keep_duplicates_flag.
• Fixes an issue where the Tanium Server LDAP service will not create user groups when those groups have duplicate names while they are from different LDAP or SCIM sources.
• Resolves an issue which can make it impossible to delete a persona if it was utilized to create one-time saved actions.
• Fixes a shortcoming in the Tanium Server where the Okta provider PUT requests for groups were not handled correctly and returned HTTP-204 which was not the expected response.
• Fixes a condition where a scheduled action could not be deleted if its corresponding content set had been previously deleted.
• Fixes a bug in the Tanium Server package refresh code which could cause a process crash in its package-refresh thread.

Known Issues and Workarounds

• LDAP syncronization fails to insert groups with a SQLException
  Workaround: This issue is being addressed immediately with an upcoming release of the Tanium Server.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup