IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Scheduled Version - Time discrepancy in Guardium

  • 1.  Scheduled Version - Time discrepancy in Guardium

    Posted Sun July 19, 2020 05:42 AM
    We recently upgraded our client from v10.6 to v11.2 on new Lenovo SR650 & SR630 Servers following the recommended upgrade path - Here is what we did
    1. Installed v11.0 (on SR650 as Aggregator and on SR630 as Collector)

    2. Upgraded to v11.2 by applying 11.0p200 GPU as show below
    (applied patch SqlGuard-11.0p9997.tgz.enc.sig & SqlGuard-11.0p200_GPU_May_2020_V11.2.tgz.enc.sig)

    3. Configured the appliances to match existing environment and also set the TIMEZONE to Africa/Lagos and DATETIME to the current date and went ahead to setup NTP

    4. Restored Config back up from old v10.6 onto the new v11.2

    5. Removed old v10.6 and put the new appliances with v11.2 onto the Network

    6. We can see all the agents (GIM & STAP) on the v11.2 and also see traffic from STAP everything is working.

    7. But the Agents need to be upgraded they are all lower versions (10.5/10.1.2)

    8. While trying to upgrade the GIM, from CM/Aggregator >Setup By Client after CLICKing Install and selecting "NOW". we see the message Install Successful, on clicking the status we see pending-install or pending-upgrade depending on the action we tried and this was on for over 1 hour.
    When we exited the status and clicked ok to get back on the setup by client page to check the GIM Events and GIM Status we did not see any activity for that process. Back on the Setup by client page, go to select bundle to see the current status of the install we noticed on the Column "Scheduled  Version" the Scheduled Time was 5 hours ahead of "NOW" or the Supposed Guardium System Time.

    I have a screen shot of the GIM Update executed at 17:40 but the Scheduled Time was 22:40. I have never experienced this before anyone know what the issue might be. I need your help resolving this mystery. 

    I have attached the screen shot for the GIM upgrade we executed at 17:40 after changing the TimeZone to New York and back to Africa/Lagos and restarting the appliances... And our NTP Server is working just fine it was not changed.

    Sorry for my lengthy story  but I hope it provides the much needed clarity. 

    Best regards everyone

    Setup By Client - Showing scheduled time to execute the upgrade


    ------------------------------
    Tekena Alamina
    ------------------------------


  • 2.  RE: Scheduled Version - Time discrepancy in Guardium

    Posted Tue August 11, 2020 10:45 PM
    Here is an update to my earlier post: Scheduled version - Time discrepancy in Guardium

    From further troubleshooting we realized this was more a Default TIMEZONE issue with v11.x (all the v11.x versions we installed had the same issue)

    How we resolved the issue
    We where able to resolve this by performing a "Custom Installation" which enabled us to change the Default Timezone from America/New York to Africa/Lagos.

    After installation, the System's BIOS clock was set to the the current time thus avoiding the use of the "store system clock timezone/datetime' commands during our
    initial setup. The Guardium version used was v11.2

    The installation has been working perfectly ever since. Thanks to my team mate & buddy Femi Adalemo!!!

    Please Note: During the Custom installation we ensured that the original Guardium disk partitions were used.

    Tekena Alamina.

    ------------------------------
    Tekena Alamina
    ------------------------------

    Original Message


Related Content