TaniTerm for IT
Deploying TaniTerm in a managed company environment — for Windows (Group Policy, Intune) and Mac (Jamf, Intune, Kandji). TaniTerm is made by Tanicom, LLC · tanicom.com/taniterm
www.tanicom.com (license and updates). IT can turn off automatic updates, set a proxy, and activate every computer centrally — even computers with no internet.1. What TaniTerm is
A terminal for network engineers: SSH, Telnet and serial consoles, SFTP/FTP file transfer, built-in FTP and TFTP servers, and a Network Adapters window. Sessions connect directly from the user's computer to the devices they choose; nothing is relayed through Tanicom.
2. Allowing TaniTerm (application control)
| Platform | Signature | Recommended rule |
|---|---|---|
| Windows | Authenticode, publisher Tanicom, LLC (Microsoft-trusted code signing) | AppLocker or WDAC publisher rule for “Tanicom, LLC”, product “TaniTerm”. Covers every future version, unlike a hash rule. |
| Mac | Apple Developer ID, team 7F5DBF8WD6, notarized by Apple | Allow by Team ID 7F5DBF8WD6 (e.g. in Santa or your MDM's app allowlist). |
3. Installing
Windows
Two installers: TaniTerm-Windows-x64-X.Y.Z.msi (Intel/AMD) and TaniTerm-Windows-arm64-X.Y.Z.msi (ARM / Snapdragon). They install per user into %LOCALAPPDATA%\Programs\TaniTerm — no admin rights needed. Silent install:
msiexec /i TaniTerm-Windows-x64-X.Y.Z.msi /qn
Deploy with Intune (Line-of-business app), Configuration Manager, or a Group Policy logon script.
Mac
TaniTerm-Mac-X.Y.Z.dmg contains TaniTerm.app (Apple silicon and Intel). Copy it to /Applications, or deploy the app with your MDM.
4. Network connections
| What | Where | When |
|---|---|---|
| License activation and check | https://www.tanicom.com/wp-json/taniterm/v1/* (443) | When activating, then about once a month |
| Update check and download | https://www.tanicom.com/ (443) | About once a day (can be turned off) |
| Sessions (SSH, Telnet, SFTP, FTP…) | Only the devices the user connects to | When the user connects |
| Web page tabs (Beta) | Only the device web pages the user opens (https/http to that device) | When the user opens one |
For a firewall or proxy allowlist, www.tanicom.com on port 443 is all TaniTerm itself needs. TaniTerm follows the computer's proxy settings automatically (including PAC files); a specific proxy can also be set by policy (below).
5. Data and privacy
- Sessions, commands, logs and settings are stored only on the computer, in the user's profile.
- Saved passwords are encrypted with the operating system: Windows DPAPI (per user) or the macOS Keychain.
- License checks send only: the license key, an anonymous computer ID (a one-way hash), the computer name, and the app version. No session, command, or log data is ever sent.
- Web page tabs keep their cookies and the certificates the user chose to trust inside TaniTerm only. With Oracle Java 8, TaniTerm may add a device the user opens to Java’s exception site list — only after asking, never if IT manages Java with deployment.config.
- No analytics, advertising or tracking.
6. Managed settings (policy)
| Setting | Type | Effect |
|---|---|---|
DisableAutoUpdate | Windows: DWORD 1 · Mac: Boolean true | TaniTerm doesn't update itself; you deploy new versions. Shown as “managed by your organization”. |
ProxyServer | String, e.g. proxy.corp.example:8080 | Proxy for TaniTerm's license and update checks only. |
LicenseKey | String, TANI-XXXX-XXXX-XXXX-XXXX | Activated automatically on first run (online). Each computer uses one of the license's computers. |
CompanyLicense | String (text of a company license file) | Activates every computer that receives it — no internet needed. Valid one year. |
Windows — Group Policy or Intune
Copy TaniTerm.admx to C:\Windows\PolicyDefinitions (or your Central Store) and en-US\TaniTerm.adml to its en-US folder. Then: Group Policy Management ▸ edit a policy ▸ Computer Configuration ▸ Administrative Templates ▸ Tanicom ▸ TaniTerm. In Intune: Devices ▸ Configuration ▸ Import ADMX, then create a profile from it.
The settings are registry values under HKLM\SOFTWARE\Policies\Tanicom\TaniTerm (or HKCU) — see TaniTerm-policy-example.reg (its settings start switched off; remove the ; in front of the ones you want).
Mac — Jamf, Intune, Kandji
Use TaniTerm-settings.mobileconfig as a template (preference domain com.tanicom.TaniTerm): move the keys you need out of the comment, fill in your values, and upload it as a custom configuration profile.
7. Activating without internet
Company-wide (recommended for IT)
Ask Tanicom for a company license file for your license (use the TaniTerm Support page, topic “Company license file”, and include your license key), then deploy its text with the CompanyLicense setting. Every computer receiving the policy is activated with no internet, USB or typing. Renew it yearly.
Single computer
In TaniTerm: License ▸ Activate Offline… and enter the license key. TaniTerm shows a request code and a QR code. On any online device (a phone works), open the QR code or tanicom.com/?taniterm_offline, and get either:
- an activation file — bring it over by USB, email or a network share, then “Use Activation File…”; or
- an activation code (about 100 characters) to type in, when USB is blocked.
Offline activations never need the monthly online check. A computer can be freed from the license in My Account ▸ Licenses.
8. Support
Questions, company license files, or help with a rollout: tanicom.com/taniterm/support — include your license key or order number. Product page: tanicom.com/taniterm