Release Notes Tanium Server (Version 7.7.2.7387)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of both a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes Tanium Server (Version 7.7.1.7221)

Tanium Server for Windows and Linux v7.7.2.7387

• Tanium Cloud availability date: January 16, 2025.
• On-premises availability date: N/A.

Special Notes

• The Tanium Server now uses Console (Version 3.9.12.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 given its End-Of-Life on 2023-10-10.

Security Updates

• N/A.

New Features

• The CDN Download option has been changed from an On/Off to an Opt-in/Opt-out/Please Choose three way option parameter.
• The Tanium Server will now limit sensor descriptions to 16KB.
• Tanium Server components now offer a tanium_uptime_seconds metric.
• Implements a gRPC route in the Tanium Server to initiate a new CXSocket connection to an endpoint, as a component for the Tanium Platform supported forms of Direct Connect and other features.
• Implements cleaning of old and no longer referenced ring set data in the Tanium Server database.

Improvements

• SAML support in the Tanium Server now allows X509IssuerSerial for specifying the proper decryption certificate in message signatures, which previously would result in a "SAML authentication failed: XMLDecryptionException: XML Decryption failed. Couldn't find key to decrypt element" error.
• Tanium Platform components have dropped support for RSA signatures in its messaging protocol.
• The Tanium Server API now returns an proper message when requesting to preview a ring set without specifying its content set, instead of the generic "RBACInsufficientPrivilege".
• Removes support for Microsoft SQL Express and updates references to SQL Server Native Client 2014 in the Tanium Server installer for Windows.
• The Tanium Server will now generate CSR requests with 3072-bit keys to be consistent with the key sizes used for self-signed SOAP certificates on first installation.
• Tanium Platform components now ship with Curl v8.11.0.
• The the Tanium Server API will now return sensor names in requests to the sensor version API.
• Reduces the cardinality of metrics issued by the Tanium Server for static file requests by bundling all such requests into a single histogram.
• Tanium Platform components now ship with libexpat v2.6.4.
• The Tanium Server will now include a user ID when responding with an HTTP-404 to membership updates for groups or users which no longer exist in the system.
• The Tanium Server will now remove unused management rights composite groups from its database and re-create them when needed, as to reduce the amount of data returned when querying the groups API.
• Adds support for the use of EncryptedKey decryption of SAML payloads in the Tanium Server, which would otherwise would fail authentication when enabling IdP token encryption with the error message: "Unknonw KeyInfo type EncryptedKey is not handled".
• Changes the default value of the Tanium Server SOAPActionHistoryLimitInDays to 90 instead of 30.
• Changes the retention of action statuses in the Tanium Server from 90 to 100 days.

Bug Fixes

• Fixes an issue in the handling of single-use requests as used for export operations where request parameters were not being passed along to streaming handlers. This would impair the new streaming versions of action and question API requests.
• Fixes a condition in the Tanium Server where multiple concurrent requests to create a question could result in an HTTP-500 error accompanied by the logged error: "SQL Exception: duplicate key value violates unique constraint: select_filter_hash_index".
• Fixes an issue in the Tanium Server RBAC settings where administrator users were associated with the "All Computers" group access instead of the correct "unrestricted management rights" setting.
• Fixes an issue where requesting the creation of a plugin schedule could fail for newly installed Module Server plugins not yet detected by the Tanium Server. This could cause failures during automated new installations.
• Changes the internal implementation of the Tanium Zone Server asynchronous work queues to force its callers to handle any exceptions generated and avoiding the uncaught error: "Thread exited with exception: Async scheduled work queue full", which would stop processing in the server.
• Fixes a problem in the Tanium Server where it would not tally v7.4 endpoints when asking questions of the form: "Get number of machines".
• Fixes an omission in the Tanium Server SAML requests where their signatures should be compressed using the deflate method to avoid an authorization failure with the message "The signature of the received authentication request is invalid".
• Fixes an issue in the Tanium Server question parser where it would allow "any" and "all" filter expressions in the left select portion of a question's text, which do not correctly represent the way in which results are filtered.

Known Issues and Workarounds

• N/A.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup