IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  New Database server - installing Agents

    Posted Thu October 02, 2025 09:16 AM

    Hi
    We have a single node Guardium installation (Standalone machine type). We want to add two new oracle 19c database servers (Red Hat Linux 8.10).

    (1)Database Server 1 :

    (a) uname -a on new database server returns :-

    Linux <<server name >> 4.18.0-553.76.1.el8_10.x86_64 #1 SMP Mon Sep 15 14:04:30 EDT 2025 x86_64 x86_64 x86_64 GNU/Linux


    cat /etc/os-release:-

    NAME="Red Hat Enterprise Linux"
    VERSION="8.10 (Ootpa)"
    ID="rhel"
    ID_LIKE="fedora"
    VERSION_ID="8.10"
    PLATFORM_ID="platform:el8"
    PRETTY_NAME="Red Hat Enterprise Linux 8.10 (Ootpa)"

    (2)Database Server 2 :

    umame -a :-
    Linux <<server name >> Linux 4.18.0-553.71.1.el8_10.x86_64 #1 SMP Fri Aug 15 18:19:39 EDT 2025 x86_64 x86_64 x86_64 GNU/Linux

    cat /etc/os-release:-

    NAME="Red Hat Enterprise Linux"
    VERSION="8.10 (Ootpa)"
    ID="rhel"
    ID_LIKE="fedora"
    VERSION_ID="8.10"
    PLATFORM_ID="platform:el8"
    PRETTY_NAME="Red Hat Enterprise Linux 8.10 (Ootpa)"

    NOTE: Kernal settings are slightly different between the two database servers which might be relevant regarding KTAP?

    My understanding is that I need to install:-

    (1)on Database server the agents GIM and STAP(via Guardium GUI)

    (2)Carry out configuration on Guardium for the agents

    (3a)We also want the KTAP to be built on database server (which is secure boot enabled).

    (3b)Note the database servers kernel are regularly upgraded (but Linux will be 8.X , currently 8.10) by linux server team.- Will this cause impact on the agents/components we want to install like K-TAP?

    (4)I have another database server that already has STAP installed (done by someone no longer at the company) . How can I find out (commands to use) what components are installed like KTAP, ATAP etc please? I am asking as I need to match these on the two new database servers mentioned above

    Is above assumption correct or have I missed anything out?

    I am not sure how to find the patches that will INSTALL GIM,STAP and KTAP/<any other agent/component??> (plus any other patch(es) you think I should be applying for our system.

    I tried looking on 'IBM Fix Central' but unsure what to download?

    Not being lazy but extra careful as its my first time of adding a new Oracle database server to monitor , are you able to list what patches I need to download please so that I can start monitoring the new database?

    Thanking you in advance
    Mo



    ------------------------------
    Mohammed azher khan
    ------------------------------


  • 2.  RE: New Database server - installing Agents

    Posted 30 days ago

    Mohammed,

    I recommend reviewing the links below. Be sure you understand the roles of each agent.

    Guardium Documentation v12 - This home page contains general management information about Guardium, including GIM, K-TAP, and S-TAP management.

    https://www.ibm.com/docs/en/gdp/12.x

    Guardium Installation Manager (GIM) Documentation - This documentation describes the GIM and gives instructions for installation and management.

    https://www.ibm.com/docs/en/gdp/12.x?topic=guardium-installation-manager

    Guardium Linux S-TAP User Guide - Use to understand how to install the S-TAP agent, whether by GIM, RPM, or shell. It should also contain information about the K-TAP and about the needs of the agent when performing either a database upgrade or an OS upgrade.

    https://www.ibm.com/docs/en/gdp/12.x?topic=linux-unix-s-tap-users-guide



    ------------------------------
    Chase Walkup
    ------------------------------

    Original Message


  • 3.  RE: New Database server - installing Agents

    Posted 20 days ago

    Thank you - will review the documents



    ------------------------------
    Mohammed azher khan
    ------------------------------

    Original Message


  • 4.  RE: New Database server - installing Agents

    Posted 17 days ago

    Hi Mohammed,
    The STAP agent management requires some Guardium skills.
    I strongly suggest to contact your local IBM team to get support from CSM or Tech Sales to revitalize your Guardium environment.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------

    Original Message


  • 5.  RE: New Database server - installing Agents

    Posted 17 days ago

    We also want the KTAP to be built on database server (which is secure boot enabled).
    (3a)
    Linux-UNIX: Enrolling a K-TAP signing key - IBM Documentation


    (3b)Note the database servers kernel are regularly upgraded (but Linux will be 8.X , currently 8.10) by linux server team.- Will this cause impact on the agents/components we want to install like K-TAP?

    Yes, 

    Check if the version will be supported; if not, report it to Support.

    Finding the correct K-TAP version for your Linux kernel

    4 You can check which components have been installed from the GIM Server collector level.




    ------------------------------
    Adam Frackowiak
    ------------------------------

    Original Message


Related Content