IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Identifying the initial node on a GDE 4.0.0.1 Cluster

    Posted 05/16/24 11:24 AM

    Greetings!

    Hi Data Security Team,

    Hope you can enlighten me on this.

    We are planning to upgrade GDE 4.0.0.1 to 4.0.0.4 then to 4.0.0.9 in preparation for migrating it to a GDE 5.1.0 (CTM).

    Upon reviewing the documentation, it tells that the upgrade should be done on the initial node. The steps are:

    1. Break the DSM Cluster
      1. remove fail-over nodes
      2. login to fail-over nodes, then cleanup HA config
    2. Upgrade the initial node
    3. Upgrade the failover nodes
    4. Rebuild the cluster

    I am not the one who built the environment and the team members are having trouble finding the old records for this environment.

    My question is, how can I identify what node is the initial node?

    On GDE 3.0, it is easy to identify the initial node because you can only apply changes on the initial node and fail-over nodes are on READ ONLY mode by default. However, from what I have observed, the default for GDE 4.0 fail-over nodes are no longer in READ ONLY.

    Are there indicators in the GUI that I may have missed?

    When I check the console, and run ha >> show  , it only shows the list of nodes in alphabetical order and no indicators for the initial node.

    Regards,

    - Julius



    ------------------------------
    Julius Ballesteros
    ------------------------------


  • 2.  RE: Identifying the initial node on a GDE 4.0.0.1 Cluster

    Posted 05/16/24 11:32 AM

    Hi @Julius Ballesteros,

    Upgrading from GDE v4x to GDE v5x requires a rehost and migration. Thales changed the product between versions, so you would be going from Data Security Manager (DSM) to CipherTrust Manager (CTM).  You'll want to review this documentation: Migrate from Data Security Manager.



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    wendy.zemba@convergetp.com
    Converge Technology Solutions

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------