IBM Support

IBM Security Guardium: Additional Windows STAP v10 Installation information

Question & Answer


Question

What settings for Windows v10 (version 10) STAPs are needed?

Cause

You are upgrading from version 9 and some settings may no longer be relevant or are no longer found in the Knowledge Center.

Answer

The version 10 information to install Windows STAP interactively is here: https://www.ibm.com/support/knowledgecenter/SSMPHH_10.1.0/com.ibm.guardium.doc.stap/stap/stap_win_install_interactive.html.

1. One change is the guard_tap.ini file location. This is where the file should be: "Look for this file in C:\Program Files (x86)\IBM\Windows S-TAP\Bin\guard_tap.ini."

And also referenced here: https://www.ibm.com/support/knowledgecenter/SSMPHH_10.1.0/com.ibm.guardium.doc.stap/stap/stap_win_upgrade_remove.html
"Note that the location of guard_tap.ini changed from c:\Windows\System to <WINSTAP_INSTALL_DIR>\Bin".

2. MSSQLEncrOnDemand was deprecated (which sets KRB_MSSQL_DRIVER_ONDEMAND).

3. v10.1 STAP still needs to have these set:
KRB_MSSQL_DRIVER_INSTALLED and KRB_MSSQL_DRIVER_NONBLOCKING.

4. v10.1.2 STAP needs only KRB_MSSQL_DRIVER_INSTALLED.

5. USE_TLS=0/1 and FAILOVER_TLS=0/1 are still valid parameters in v10.

6. LHMON: This is deprecated in v10.1.2. Those parameters do not need to be set unless you run LHMON for Windows 2003 or 2008(pre-R2), but the system requirements do not show Windows 2003 supported. Windows 2008 SP2 is. If parameters related to LHMON exist, setting them causes no harm, e.g. if old guard_tap.ini files got copied to the new environment, they don't need to be changed.

Note: STAP is to be installed as an administrative user to avoid any issues with permission.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium S-TAP","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2;10.1.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22003862