IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Certificate expiration microsoftca

    Posted Mon January 15, 2024 09:36 AM

    Hello,

    Faced with the problem of certificate expiration. Can you tell me if updating the GIM agent to version 11.3.8 will help to renew the certificate? At the moment we have Guardium 11.460 version installed, what version should we upgrade it to in order to solve the microsoftca 1-4 problem?

     



    ------------------------------
    Yana Nkr
    ------------------------------


  • 2.  RE: Certificate expiration microsoftca

    Posted Mon January 15, 2024 10:07 AM

    Hi Yana:

    I had the same messages in my platform. My version of Guardium is 11.5 with 530 patch bundle installed. For Microsoft certificates it was solved installing the 535 bundle (in 11.5 version). According support people, in 11.4 it is solved using 485 patch bundle. In 11.3 with 392. 

    But...the gim certificate still appearing in Aggregators, according tech support its will solve in the next bundle that could be appears at the ends of January.

    Hope this help.



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------



  • 3.  RE: Certificate expiration microsoftca

    Posted Mon January 15, 2024 12:31 PM

    Thanks!



    ------------------------------
    Yana Nkr
    ------------------------------



  • 4.  RE: Certificate expiration microsoftca

    Posted Thu February 22, 2024 09:42 AM

    Hello,

    after installing patch 538 for gim certificates, we still have a warning on the collector. Have you installed this patch in the meantime? Thank you!



    ------------------------------
    Sanela Kovač
    ------------------------------



  • 5.  RE: Certificate expiration microsoftca

    Posted Fri February 23, 2024 07:53 AM

    Hi Sanela:

    I installed the patch in my aggregator and it's change the message. This is not automatically, this take some time and is necessary that all server registered in the system are up, because the system start sending the certificate to all of them. In the release notes appears that this take a few hours to the message disappears, and it's true.

    Takes care.



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------