IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  S-TAP Install Automation

    Posted 02/07/22 04:21 PM
    We are looking to improve our Windows deployment of the S-TAP. Currently the GIM is automatically installed using the executable. The S-TAP is then installed by the Guardium Admin via the GIM Server. This leaves some intermittent time where the server admins cannot proceed with server completion until the Guardium Admin has time to perform the install. Has anyone developed a process where the GIM managed S-TAP is automatically installed? My thoughts were that there maybe a guardapi or other method to have this done.

    ------------------------------
    Chase Walkup
    ------------------------------


  • 2.  RE: S-TAP Install Automation

    Posted 02/08/22 09:59 AM

    Chase,

    I asked your question internally and got a couple useful responses:

    Option 1: Use the 'complete' installer (that will install the S-TAP along with the GIM at the same time) using the deploy folder functionality.  It works well on Windows.

    Option 2: Scripting using APIs - identify the platform (DB server) and then start STAP installation (module) and customize configuration:
    gim_assign_bundle_or_module_to_client_by_version
    gim_assign_latest_bundle_or_module_to_client
    gim_cancel_install
    gim_cancel_uninstall
    gim_get_available_modules
    gim_get_client_last_event
    gim_get_global_param
    gim_get_modules_running_status
    gim_list_bundles
    gim_list_client_modules
    gim_list_client_params
    gim_list_mandatory_params
    gim_list_registered_clients
    gim_list_unused_bundles
    gim_load_package
    gim_remote_activation
    gim_remove_bundle
    gim_reset_client
    gim_schedule_install
    gim_schedule_uninstall
    gim_set_diagnostics
    gim_set_global_param
    gim_unassign_client_module
    gim_uninstall_module
    gim_update_client_params



    ------------------------------
    Josh Klahn
    Offering Manager - Guardium Insights
    United States
    ------------------------------



  • 3.  RE: S-TAP Install Automation

    Posted 02/08/22 03:59 PM
    Thank you, Josh. Are you able to provide documentation for how both of these processes work?

    ------------------------------
    Chase Walkup
    ------------------------------

    Original Message


  • 4.  RE: S-TAP Install Automation

    Posted 02/08/22 04:29 PM
    Consolidated installer (GIM + STAP):
    https://www.ibm.com/docs/en/guardium/11.0?topic=iuugcws-installing-gim-other-packages-windows-servers-by-using-consolidated-installer

    Guardium Installation Manager (GIM) Agent Installation - Part 1
    https://www.securitylearningacademy.com/enrol/index.php?id=3238

    Guardium Installation Manager (GIM) Usage and Deployment Methods - Part 2
    https://www.securitylearningacademy.com/enrol/index.php?id=3344

    ------------------------------
    Josh Klahn
    Product Manager
    Guardium Insights
    ------------------------------

    Original Message


  • 5.  RE: S-TAP Install Automation

    Posted 02/24/22 10:55 AM
    Thanks for your help, Josh! This was everything that I needed.

    ------------------------------
    Chase Walkup
    ------------------------------

    Original Message


Related Content