IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Guardium DSM Upgrade to 6.4.3

    Posted Tue November 24, 2020 12:43 PM

    Greetings!

    Hi Data Security Team,


    Need your suggestion on DSM Upgrade -

    I am planning to have our DSM upgrade from current version 6.0.2 to 6.4.2 OR 6.4.3. Would request you to please suggest me the steps to do it in HA environment.

    Regards



    ------------------------------
    vijay jamwal
    ------------------------------


  • 2.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Wed November 25, 2020 02:10 AM

    Hi,

    Upgrade is very well described in the documentation.
    Generally you must:
    - remove DSMs from cluster
    - upgrade each DSM separately
    - join all DSMs together after upgrade
    You should not:
    - Change agents configuration during upgrade
    DSM upgrade is transparent to agents



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------

    Original Message


  • 3.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon November 30, 2020 02:11 PM
    Hi Vijay,

    You will likely need to perform the upgrade in 2 stages based on your current DSM version. Also, there is a port update you may need to check and request an update if Firewall is been used.

    Please, check the documentation.

    Thank you!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------

    Original Message


  • 4.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Thu December 03, 2020 08:08 AM
    If I recall, there is no upgrade path from 6.0.2 to 6.4.x, one of the reason I can recall is the DB used for 6.4.x is different than 6.0.2.

    Thales support recommend to built the 6.4.x and restore the configuration from 6.0.2.

    ------------------------------
    TS Teh
    ------------------------------

    Original Message


  • 5.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Fri December 04, 2020 12:49 PM
    I might have to upgrade DSM first to 6.4.2 and then to 6.4.3 ----
    One of the do c u m e n t suggest that DSM has to be at 6.4.2 to upgrade to the latest 6.4.3

    Any thoughts?

    ------------------------------
    vijay jamwal
    ------------------------------

    Original Message


  • 6.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Fri December 04, 2020 01:08 PM
      |   view attached
    Hi Vijay,

    When we upgraded from 6.1 to 6.3 we had to do it in 2 stages (1st upgrade to 6.1.0.9229 and then, to 6.3) because there a significant change as they've replaced the embedded database. I've attached the installation guide I've used... 

    Please, look to the Thales/IBM upgrade documentation for the version you're going to that I believe it may be similar.

    Thanks again!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------

    Attachment(s)

    pdf
    GDE_v4.0.0.1_Install_Config_Guide_v1.pdf   576 KB 1 version
    Original Message


  • 7.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon January 25, 2021 03:11 PM

    Hi All

    Thanks for the input and document -- it helped

    The upgrade path I am going to follow is   - DSM v6.0.2 >>>> v6.1.9229 >>>> v6.3.0.1303 >>>> v6.4.2.16023

    I have a next question on  -- "convert2failover" and "long join"  (I understand that both the commands are used to bring the nodes into cluster again)

    1> Lets say I have upgrade  DSM from v6.0.2 to  v6.1.9229 and want to bring my cluster up  after one HOP upgrade............. So at this point do I need to use convert2failover or "long join" can also work. Will long join working on version below to v6.4.2.16023?

    Sorry for my english. I hope I was able to explain my doubt ..
    Kindly assist.

    Thanks,
    VIjay



    ------------------------------
    vijay jamwal
    ------------------------------

    Original Message


  • 8.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon January 25, 2021 04:42 PM
    Hi Vijay,

    I believe that may be as simple as :
    1) If you already upgraded to that version, to go to 'cli command' , 'ha' menu option and type '?'. It should list the options there and one of the options... if I remember correctly, it may be 'join' for v6.1.9229
    2) If not installed yet, to check on the admin guide for the 'ha' menu option for the available commands 

    I hope that helps..

    Thanks again!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------

    Original Message


  • 9.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Tue January 26, 2021 06:34 AM

    Hi,
    Between 602 and 642 the DSM architecture changed from Active-Passive to Active-Active cluster deployment.
    So in the new architecture there is no longer failover DSM. You need only destroy cluster before patching and join nodes together after upgrade.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------

    Original Message