STIGQter STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium operating system (TanOS) must install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-254871r958940_rule

Vulnerability Number

V-254871

Group Title

SRG-OS-000439

Rule Version

TANS-OS-001515

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. Download the target TanOS upgrade file from Tanium.

2. Transfer the upgrade to the SFTP incoming folder on the TanOS appliance.

3. Access the Tanium Server interactively.

4. Press "B" for "Appliance Maintenance Menu," and then press "Enter".

5. Press "3" for "Upgrade TanOS," and then press "Enter".

5b. If this TanOS server is part of an appliance array, type "yes" and then press "Enter" to choose to upgrade all appliances in the array.

6. Press "1" (or the appropriate number if there are multiple upgrade files to select from) to choose the upgrade file to install.

7. Review the upgrade version confirmation and type "Yes" and then press "Enter" to begin the upgrade.

Check Contents

1. Access the Tanium Server interactively.

2. Check the version number of the installed TanOS release displayed at the bottom of the main menu.

3. Compare to the latest available release on https://kb.tanium.com/Category:TanOS.

4. If the installed release is not the current release, review the release notes for the current release and any other releases newer than the current version to check for security-relevant updates and when they were released.

If there are security-relevant updates that have not been installed within the directed time period, this is a finding.

Vulnerability Number

V-254871

Documentable

False

Rule Version

TANS-OS-001515

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Check the version number of the installed TanOS release displayed at the bottom of the main menu.

3. Compare to the latest available release on https://kb.tanium.com/Category:TanOS.

4. If the installed release is not the current release, review the release notes for the current release and any other releases newer than the current version to check for security-relevant updates and when they were released.

If there are security-relevant updates that have not been installed within the directed time period, this is a finding.

Check Content Reference

M

Target Key

5491