---
updatedAt: 2026-10-06T09:33:40.000Z
agentTools:
projectIndex: https://docs.axonius.com/llms.txt
---
# Tanium Asset
Tanium Asset provides an inventory of hardware and software assets including servers, laptops, and desktops for thorough insight.
### Asset Types Fetched
* Devices, Software, SaaS Applications
## Before You Begin
**Ports**
* TCP port 443: REST API
### Authentication Methods
* User Name/Password
* API Token ID/API Token
* Client-side Certificate Authentication (Mutual TLS)
### Permissions
The following Module permission is required:
* Asset Report Read
To assign the permission to the value supplied in [User Name](#required-parameters):
1. Log in to the value supplied in [Hostname or IP Address](#required-parameters) with an account that has the permissions necessary to edit users.
2. Go to the **Administration** `>` **Users** page.
3. Select the value supplied in [User Name](#required-parameters) from the list of users and click **View User**.
4. Go to **Roles and Effective Permissions** `>` **User Administration** and click **Edit Roles**.
5. Under **Role Management**, go to **Assign Roles** `>` **Grant Roles**. Then, click **Edit**.
6. In the **Edit Grant Roles** dialog window, select **Asset Report Reader** and click **Save**.
7. Back on the **Assign Roles** page, click **Show Preview to Continue**.
8. Click **Save** and **Continue**.
9. The **User Administration** page should now look like this:
#### Verifying Permissions
1. Login to Tanium Asset with the values supplied for [User Name and Password](#required-parameters).
2. Go to **Asset** `>` **Reports**.
3. Under **Asset Reports**, click the **All Assets** report to verify the permission was assigned properly.
## Additional Setup
### Creating an API Token
An [API Token](#required-parameters) that is bound to a dedicated Axonius persona is mandatory to connect to a Tanium Cloud instance. To create this token, follow the steps in [Managing API Tokens](https://help.tanium.com/bundle/ug_console_cloud/page/platform_user/console_api_tokens.html#add_API_tokens).
**Important Guidelines:**
* **Creating an Axonius-dedicated persona** - The default persona to which the API Token is bound is the **Default** persona. You need to create an Axonius-dedicated persona and bind the token to this persona.
1. Log into Tanium as a user with permissions to Create Personas and Edit Users.
2. From the main Tanium screen, click on your profile icon at the top right corner.
3. Click **Persona**.
4. In the **Select a Persona** dialog, select your Axonius-dedicated persona from under **Other Personas**.
5. Assign this persona the Asset API User permission to successfully generate an API Token.
6. Click **Apply**.
* The API token must have the Token - Use permission, which is required to send requests to Tanium Cloud for new API tokens. To assign this permission, go to **Administration** `>` **Permissions** `>` **API Tokens**, then select the relevant token and permission.
* In the **Create API Token** dialog:
* It is recommended to set the value of **Expiration** to 365 (the maximum allowed).
* Under **Trusted IP Addresses**, enter the edge URL(s) of your Axonius instance. A `/` is required, for example, `192.0.2.0/24`. You can enter 0.0.0.0/0 for testing or troubleshooting purposes.
### Configuring a View
If you are connecting to Tanium 7.5 or higher, it is strongly recommended to use a dedicated Axonius View when fetching assets from the Tanium Asset module. See [Configuring Views](https://help.tanium.com/bundle/ug_asset_cloud/page/asset/views.html) for more information.
**Important Guidelines:**
* In the **Select Columns from Asset Tables** section, select the machine attribute you want to include in Axonius. Axonius accepts the following attributes:
* Asset ID, Computer Name, Serial Number, OS Platform, Operating System, Service Pack, Manufacturer, IP Address, Username, Created Date, Updated Date, Source ID
## Connecting the Adapter in Axonius
To connect the adapter in Axonius, provide the following parameters:
### Required Parameters
1. **Hostname or IP Address** - The Hostname or IP address of the Tanium server that Axonius can communicate with via the required Ports. This adapter supports both on-premise and Tanium Cloud instances. When connecting to a Tanium Cloud instance, "**-api**" must be added to the end of the subdomain of your Tanium Cloud instance. For example: `domain.cloud.tanium.com` must be entered as `domain-api.cloud.tanium.com`.
2. **User Name or API Token ID** AND **Password or API Token** - The credentials for a user account that has the [Required Permissions](#required-permissions) to fetch assets.
* *If youβre authenticating with an API Token, follow these steps:*
1. In Tanium, go to **Administration** > **Permissions** > **API Tokens**. This page displays attributes of valid API tokens.
2. Select the relevant API token in the grid and click **View Token**.
3. Copy the token's ID from the ID column, and paste it into the **User Name or API Token ID** Axonius field. Note that the ID column might be hidden by default.
4. Copy the token value and paste it into the **Password or API Token** Axonius field.
**Note**
You can see the token value in the Tanium console only within 5 minutes after its creation. If you wait longer than that, or refresh the page, or navigate to another page in the console - you will no longer be able to see it.
### Optional Parameters
1. **Enable Client Side Certificate** - Check this option to authenticate to Tanium servers using client certificates, meeting advanced security requirements for organizations that enforce mutual TLS authentication. When this is enabled, provide the following:
1. **Client Private Key File (.pem)** - Upload the client private key file in PEM format.
2. **Client Certificate File (.pem)** - Upload the client certificate file in PEM format.
**Notes**
* Certificates are securely stored in Axonius and used only for authenticating to Tanium servers.
* The system validates the certificates while establishing the connection to prevent misconfiguration. If the certificate and private key do not match, or missing, or parsed incorrectly, you will receive an appropriate error message.
2. **Name or ID of View** - The name or ID of the a View in Tanium Asset used to fetch assets.
3. **Verify SSL** - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see [SSL Trust & CA Settings](/docs/certificate-settings#ssl-trust-ca-settings).
4. **HTTPS Proxy** - Connect the adapter to a proxy instead of directly connecting it to the domain.
To learn more about common adapter connection parameters and buttons, see [Adding a New Adapter Connection](/docs/adding-a-new-adapter-connection).
## Advanced Settings
Note
Advanced settings can either apply to all connections for this adapter, or to a specific connection. Refer to [Advanced Configuration for Adapters](/docs/advanced-configuration-for-adapters).
1. **Number of assets to fetch per page** *(required, default: 200)* - Control the number of assets that are fetched per page.
2. **Number of seconds to wait in between each page fetch** *(required, default: 1)* - Control the number of seconds to wait in between each page.
3. **Devices to exclude by host name** *(optional)* - A comma-separated list of device host names to exclude.
4. **Devices to exclude by model** *(optional)* - A comma-separated list of device models to exclude.
5. **Devices to exclude by domain** *(optional)* - A comma-separated list of device domain names to exclude.
6. **Populate Dynamic Attributes** *(optional)* - Dynamically create fields in Axonius for all attributes returned by Tanium Asset.
* If enabled, adapter specific fields will be dynamically created in Axonius for all attributes returned for each asset with the appropriately mapped type as defined in Tanium.
* If disabled, adapter specific fields will not be dynamically created in Axonius.
7. **Add running services to installed software** *(optional)* - Select to make ci\_running\_services visible and queryable.
8. **Round RAM memory to the closest power of 2** - Select this option to round the `Total RAM (GB)` field to the closest power of 2. Example: 14GB is presented as 16GB.
9. **Deduplicate devices** - Select this option to deduplicate devices.
10. **Remove SIU from installed software** - Select this option to filter out all software with the source βSIUβ.
11. **Parse Installed Software: Uninstall String** - Select this option to parse the `uninstall_string` field from raw data to table view for the Installed Software table on assets in the Software module.
Note
To learn more about **Adapter Configuration** tab advanced settings, see [Adapter Advanced Settings](/docs/advanced-settings).
### Related Enforcement Actions
* [Tanium - Create Action](/docs/tanium-create-action)
## Version Matrix
This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact [Axonius Support](mailto:support@axoniuscom) if you have a version that is not listed and it is not functioning as expected.
| Version | Supported | Notes |
| ------------------------------------- | --------- | -------------------------------------------------------------------------- |
| Tanium versions prior to 7.3.314.3424 | No | This adapter utilizes the REST API, which was added in Tanium 7.3.314.3424 |
| Tanium 7.3.314.3424 | Yes | |
| Tanium 7.3.314.3668 | Yes | |
| Tanium 7.3.314.4147 | Yes | |
| Tanium 7.3.314.4250 | Yes | |
| Tanium 7.4.4.1250 | Yes | |
| Tanium 7.4.6.1088 | Yes | |
| Tanium 7.5.5.1162 | Yes | |
| Tanium Cloud | Yes | |
### Asset Module Versions
Modules within Tanium have their own version, which is separate from the platform version.
| Version | Supported | Notes |
| -------------------------- | --------- | ----- |
| Asset Module 1.6.5.0002 | Yes | |
| Asset Module 1.8.0.0078 | Yes | |
| Asset Module 1.9.1.0007 | Yes | |
| Asset Module 1.19.158.0000 | Yes | |