Troubleshooting
Problem
IBM Security Guardium STAP in Add/Remove programs is grayed out and uninstallation using cmd doesn't work
Symptom
Removal of IBM Guardium STAP grayed out in Programs and Features and running the following command also doesn't remove the STAP
setup.exe" /s /z" --host=g10.guardium.com --remove=true
Diagnosing The Problem
Warning!
The below steps require in depth knowledge of Windows operating system. Do not attempt unless the normal uninstall methods for Windows S-TAP have all failed. It is recommended for an administrator knowledgeable with the server to assist.
Run the below command to check if STAP and the Kernel drivers are running or not
sc query Guardium_STAP
Note for v10 there is a "Guardium Resource Monitor" service that should be handled in the same way as the S-TAP.
For v10:
driverquery | findstr "GUARDIUM wfp NpPrc NtTdi"
Example:
| C:\Users\>driverquery | findstr "GUARDIUM wfp NpPrc NtTdi"
For v9: |
If all the Kernel drivers are running then you must stop them first before cleaning the registry. If all the drivers are showing in stopped state then you can proceed to clean the registry.
Resolving The Problem
1. Stop the Kernel drivers and Guardium service by running the below command for each driver and service found running in driverquery
Important Note: Only stop the Guardium related drivers and services
Example:
net stop wfpMonitor
Run the below command to verify that the driver is stopped
sc query wfpMonitor
2. Once all the drivers are stopped then run the below script in Powershell to remove entries from registry
Guardium_ForceUninstall_0.zip
To remove Guardium resource monitor service, add the following command to the above attached script, or run it on the server:
remove-item 'HKLM:\System\CurrentControlSet\Services\Guardium Resource Monitor' 3. Reboot the server
4. After the server reboot perform the below steps. These are required to delete stale records or else when you try to install STAP it will ask to perform upgrade from existing version
i) On Run prompt > regedit.exe
ii) Go to below location
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
iii) Search for IBM InfoSphere Guardium STAP by navigating across GUID folders and delete the folder
iv) Perform the same for other Guardium services like GIM, Resource Monitor etc.
5. After performing the above steps reboot again. After the reboot you should be able to install new STAP
Was this topic helpful?
Document Information
Modified date:
04 September 2019
UID
swg22005313