IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  GIM Server Side Certificate still using SHA1 Signature algorithm

    Posted 05/16/24 06:03 AM

    Hello Seniors, 

    In our Environment. I have upgraded my appliances from v11.3 to v11.5 with Patch 535 , 538(GIM Certificate Upgrade). However, upon executing "show certificate gim server" it is still showing Signature algorithm as a SHA1WIthRSA. Due to this New GIM Agent are unable to connect to the GIM Server as getting SSL connect error. So ,the question is why patch 538 did not updated algorithm from SHA1 to  SHA256 ? Do, I need to Install 11.5p1042 patch as well ...? Kindly assist me on this. thank you!



    ------------------------------
    Akash Parmar
    ------------------------------


  • 2.  RE: GIM Server Side Certificate still using SHA1 Signature algorithm

    Posted 06/21/24 06:49 PM

    Hi Akash,

    I have also done the same upgrade and able to see both SHA with 128 and 256 entries. New Gim installations will not fail if you use 11.5.7 latest agent where they are supporting sha1 and sha2 both. I feel this sha1 and sha2 certificate issue is not fully sorted by ibm developers as well. May be addressed in future releases.



    ------------------------------
    Regards,
    Rizwan Ali
    Senior Guardium Consultant
    Pakistan
    ------------------------------



Related Content