Release Notes
Abstract
This technical note provides guidance for installing IBM Security Guardium Data Protection Windows Agents v11.5.0.338, including any new features or enhancements, resolved or known issues, or notices associated with the patch.
Content
Patch information
| Product: | IBM Security Guardium |
|---|---|
| Release version: | Guardium 11.5 Windows GIM |
| Completion date: | 8 May 2024 |
Fix IDs
| Guardium_11.5.0.338_GIM_Windows |
| Guardium_11.5.0.285_FAM_Crawler_Windows |
| Guardium_11.5.0.290_GUC_Windows |
Finding the patch
This document provides a reference to the contents of this patch. If applicable, the detailed description of each fix and instructions for applying this patch are contained within the download package. The actual package is available for downloading from the IBM Fix Central website at http://www.ibm.com/support/fixcentral/
Make the following selections on Fix Central:
Product selector: IBM Security Guardium
Installed Version: 11.0
Platform: Windows
Click "Continue", then select "Browse for fixes" and click "Continue" again.
Make the following selections on Fix Central:
Product selector: IBM Security Guardium
Installed Version: 11.0
Platform: Windows
Click "Continue", then select "Browse for fixes" and click "Continue" again.
Attention
SHA256 GIM client certificates
After applying patch 11.0p530 or newer, Guardium supports SHA256 GIM certificates. This has the following implications:
After applying patch 11.0p530 or newer, Guardium supports SHA256 GIM certificates. This has the following implications:
- If using default certificates, GIM connections are secured using SHA128. Custom certificates using SHA256 are more secure and are recommended for GIM connections.
Note that GIM connectivity is not interrupted after applying this patch. - GIM only verifies bundles signed with SHA256 and requires installing a transitional GIM bundle to support the change from SHA128 to SHA256.
For more information, see Updating Guardium Data Protection GIM clients with SHA256 certificates.
SHA128 GIM client certificates
Certificates is set to expire May 2024. If the certificates are not renewed by the expiration date, the GIM client-server communication will be affected. Please note that data monitoring activity through STAP will not be disrupted.
Certificates is set to expire May 2024. If the certificates are not renewed by the expiration date, the GIM client-server communication will be affected. Please note that data monitoring activity through STAP will not be disrupted.
- To renew GIM server (appliance) certificate install 11.5p1042. This update will distribute renewal of the GIM client certificate as well.
- To renew GIM clients (database server agent) certificate only, upgrade to v11.5.0.338 or newer.
Refer to the following Flash alert for more information: https://www.ibm.com/support/pages/node/7115129
Deprecated support and functionality
Windows Server 2012 and 2012 R2
Windows Server 2012 and 2012 R2 have reached end of support by Microsoft on October 10, 2023 and will no longer receive security updates. For this reason, as of March 31, 2024, Guardium can no longer maintain support for these operating systems. For more information, please see: IBM Security Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2
Microsoft SQL Server 2012
IBM Security Guardium no longer supports Microsoft SQL Server 2012 as of July 12, 2022. For more information, please see: IBM Security Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012
Windows Server 2012 and 2012 R2 have reached end of support by Microsoft on October 10, 2023 and will no longer receive security updates. For this reason, as of March 31, 2024, Guardium can no longer maintain support for these operating systems. For more information, please see: IBM Security Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2
Microsoft SQL Server 2012
IBM Security Guardium no longer supports Microsoft SQL Server 2012 as of July 12, 2022. For more information, please see: IBM Security Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012
New features and enhancement
Must Gather v3.1
As with previous versions, Must Gather continues to aid customers and support teams in troubleshooting issues by gathering and uploading debugging information. V3.1 adds a parsing option delivered by a new PowerShell script that aggregates important information from many files into a simple summary. For more information, see Must gather for Windows S-TAP and other Windows agents.
As with previous versions, Must Gather continues to aid customers and support teams in troubleshooting issues by gathering and uploading debugging information. V3.1 adds a parsing option delivered by a new PowerShell script that aggregates important information from many files into a simple summary. For more information, see Must gather for Windows S-TAP and other Windows agents.
Known limitations and workarounds
Guardium Windows GIM v11.5.0.338
| Issue Key | Description |
|---|---|
| GRD-73219 | An error may display when importing the transitional GIM bundle if the regular GIM bundle has previously been uploaded and imported to the GIM GUI on an appliance patched with p530 or newer. Workaround: Should an error display when uploading or importing the transitional GIM bundle, it can be ignored. The bundle will be imported despite the error and can be used to upgrade GIM. Note: The GIM transitional bundle for Windows is to be used for GIM client upgrade from the appliance UI after the appliance has been upgraded to v11p530 with SHA256. For more details, see Updating Guardium Data Protection GIM clients with SHA256 certificates. |
Resolved issues
Guardium Windows GIM v11.5.0.338
| Patch | Issue Key | Summary | APAR (Known Issue) |
|---|---|---|---|
| v11.5.0.143 | Link to v11.5.0.143 on Fix Central | ||
| v11.5.0.258 | Link to v11.5.0.258 on Fix Central | ||
| v11.5.0.290 | Link to v11.5.0.290 on Fix Central | ||
| v11.5.0.338 | GRD-79901 | Updated SHA1 GIM client certificates are available in this build. See the "Attention" section for more information. |
Guardium Windows FAM Crawler v11.5.0.285
| Patch | Issue Key | Summary | APAR (Known Issue) |
|---|---|---|---|
| v11.5.0.143 | Link to v11.5.0.258 on Fix Central | ||
| v11.5.0.285 | GRD-67795 | The FAM crawler bundle has been updated to support the new SHA256 certificates and should be used in conjunction with a Guardium appliance v11p530 or newer. |
Guardium Windows GUC v11.5.0.290
| Patch | Issue Key | Summary | APAR (Known Issue) |
|---|---|---|---|
| v11.5.0.143 | Link to v11.5.0.143 on Fix Central | ||
| v11.5.0.290 | GRD-67795 | The GUC bundle has been updated to support the new SHA256 certificates and should be used in conjunction with a Guardium appliance v11p530 or newer |
Installers with MD5Sums
| MD5Sum | File Name |
|---|---|
| f43a45154f19fa401fcf98f40a65b4e0 | GIM-Installer-11.5_r110500338_1.zip |
| f1c5ee260ab3c786352f62caf8be2bf2 | guard-GIM-11.5_r110500338_1-x86_x64.gim |
| bd05be969ae123b17721f7efe0194d5f | guard-GIM-guardium_11.5_r110500338_1-Windows-Server-Windows-x86_x64.exe.signed |
| c790886fe56a6cc0cee37ef16f37ff75 | guard-GIM_transitional-11.5_r110500338_1-x86_x64.gim |
| f9ff51561116e0daf4c0514bec1429f7 | conf.reload.FAM |
| 3805b931a4d12f31b8b64f3516e24ed2 | guard-FAM-11.5_r110500285_1-x86_x64.gim |
| eb6adbb4a82dda7844a676c7efd8b30e | guard-FAM-guardium_11.5_r110500285_1-Windows-Server-Windows-x86_x64.exe.signed |
| dfe09dde5daf63f09269e047c2395772 | guard-GUC-11.5_r110500290_1-x86_x64.gim |
| 839a6cf77335dc2fe3ba0f22b23ae1f9 | guard-GUC-guardium_11.5_r110500290_1-Windows-Server-Windows-x86_x64.exe.signed |
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
08 May 2024
UID
ibm17148999