IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Update Guardium V11.5 to 12.x error

    Posted 2 days ago

    hi 

    I have a problem with updating Guardium from 11.5x to 12.x when running the Patch file: SqlGuard-11.0p9998 maraca failed, and when checking the log file, the error is as follows:

    ERROR: FOR UPGRADE TO v12 APPLIANCE SHOULD BE REBUILT - no root partition.

    ERROR: FOR UPGRADE TO v12 APPLIANCE SHOULD BE REBUILT - no var partition.

    But they do exist. They were created when installing the Guardium server.



    ------------------------------
    Daniel Chinas Vega
    ------------------------------


  • 2.  RE: Update Guardium V11.5 to 12.x error

    Posted yesterday

    Hi Daniel

    My suggestion is fresh installation. We always install fresh devices and move all agents to them. Troubleshooting may consume your time more than fresh installation :) If you have 1 cm 2 collector than install fresh 3 devices and equalize all config. Than start moving agents one by one.

    Regards

    Mehmet



    ------------------------------
    Mehmet Emin Dogan
    ------------------------------



  • 3.  RE: Update Guardium V11.5 to 12.x error

    Posted 18 hours ago

    Hi Daniel

    pls. read the patch release notes: Release of Guardium Data Protection pre-upgrade health check 11.0p9998

    The patch is not failing - it does what's expected ... the messages are documented in the patch release notes. 
    --> It prevents you from doing things that are not good for you ;-) 

    In the product documentation you can find the chapter:

    >> Upgrading your Guardium system > Planning an upgrade > Identifying the correct upgrade path


    The version 12 upgrade patch is incompatible with the following configurations:

      • Guardium systems with custom partitions.
      • Encrypted Logical Volume Management (LVM) disks.
      • Guardium systems that are deployed in cloud environments.

    Your disk names are not sth. like /dev/sda1, /dev/sda2 ... 

    They are like /dev/mapper/...

    --> For me this is a clear sign that you are using custom partitions, LVM or cloud - its definitely no plain-vanilla install within a VM or on plain Hardware --> with default partitioning !  


    Conclusion

    • 11.0p12001 is NO candidate (for inplace-upgrade) when you installed the appliance by using custom partiions. You might did not know it if someone else installed it (and didn't wrote a deployment log ...)

    • You need to execute a "rebuild"-Upgrade
      • Main Steps: 
        • backup 
        • re-install with v12
        • restore
    • Before you start:

    //Chris



    ------------------------------
    Christoph Hamm
    ------------------------------



  • 4.  RE: Update Guardium V11.5 to 12.x error

    Posted 18 hours ago

    Hi Daniel

    You are using custom partitions..

    not /dev/sdX --> but /dev/mapper/xxx

    That means: No in-place upgrade is possible --> see https://www.ibm.com/docs/en/gdp/12.x?topic=upgrade-identifying-correct-path

    The patch is working as expected - it warns you that p12001 will not work.

    Conclusion:
    You need to upgrade by a so called Rebuild (Backup, re-install Appliance with v12 iso, restore)

    Intro: There is a very good recording from Guardium Virtual User Group (VUG) - Avi explains all the main pitfalls ... --> see  https://youtu.be/nuQds7moBhg

    // chris
     



    ------------------------------
    Christoph Hamm
    ------------------------------