IBM Guardium

 View Only

 Upgrade Guardium from 11.4 to 11.5

Shahbaz Ahmed's profile image
Shahbaz Ahmed posted Sun December 22, 2024 12:58 AM

Hi Community,

We are planning to upgrade our Guardium environment from version 11.4 to version 11.5 and would like to know if there are any specific requirements for this upgrade.

Currently, we are running the following version and would like to confirm which upgrade patch needs to be applied for transitioning to version 11.5 on Linux (RHEL).

Could someone provide the link to the appropriate upgrade patch? Additionally, are there any prerequisites that we should consider before proceeding with the upgrade?

System Information:
Version: 11.4.0_r111112_v11_4_1-el79-20210904_1954
Latest patch number: 9998
Latest patch description: Health Check for v12 upgrade installation (Aug 07 2024)
Mark Harris's profile image
Mark Harris

Hi Shahbaz,

It would be best to get a full patch listing from the cli, simply run com installed, that should give you the exact command to list all installed patches as what you have provided is simply p9998 which is the patch going to V12.

Going to V11.5 is pretty straight forward, you simply need to install p9997, and review the release notes for that patch.  You will have to review the health check log and the action you need to take.

Please review the online documentation titled upgrade path:

https://www.ibm.com/docs/en/gdp/11.5?topic=upgrade-identifying-correct-path

We would always recommend the latest V11.4 bundle and sniffer bundle, before upgrade.  check IBM Fix Central for that.

Also the upgrade must be done top down method, CM, Aggregators and then Collectors.

Hope that helps.

Shahbaz Ahmed's profile image
Shahbaz Ahmed

Hi Mark, Thank you for assistance, it is helpful. following are the patches installed. 

P#      Who       Description                     Request Time         Status
400     CLI       Guardium Patch Update (GPU) for 2022-09-13 11:12:33  DONE: Patch installation Succeeded.
450     CLI       Update Bundle for GPU 400 (Sep  2022-09-20 12:49:26  DONE: Patch installation Succeeded.
4048    CLI       Snif Update (Aug 10 2022)       2022-09-20 13:19:14  DONE: Patch installation Succeeded.
1013    CLI       CVE-2021-45105, CVE-2021-45046  2023-03-20 11:30:22  DONE: Patch installation Succeeded.
475     CLI       Update Bundle for GPU 400 (Jul  2023-09-12 09:16:05  DONE: Patch installation Succeeded.
476     CLI       Security Fix                    2023-09-12 13:45:16  DONE: Patch installation Succeeded.
4062    CLI       Snif Update (May 29 2023)       2023-09-25 13:12:51  DONE: Patch installation Succeeded.
1029    CLI       Security Fix                    2023-10-01 11:28:27  DONE: Patch installation Succeeded.
4067    CLI       Snif Update (Aug 15 2023)       2023-10-01 12:58:23  DONE: Patch installation Succeeded.
1030    CLI       Security Fix                    2023-10-16 10:28:59  DONE: Patch installation Succeeded.
1033    CLI       Security Fix                    2023-10-16 11:19:03  DONE: Patch installation Succeeded.
485     CLI       Update Bundle for GPU 400 (Nov  2023-11-21 09:43:50  DONE: Patch installation Succeeded.
6403    CLI       Monthly Security Patch          2024-02-11 12:02:29  DONE: Patch installation Succeeded.
6404    CLI       Monthly Security Patch          2024-02-15 11:25:12  DONE: Patch installation Succeeded.
1042    CLI       GIM Certificates Update         2024-04-18 14:23:00  DONE: Patch installation Succeeded.
490     CLI       Update Bundle for GPU 400 (Apr  2024-08-13 13:25:04  DONE: Patch installation Succeeded.
4076    CLI       Snif Update (Apr 19 2024)       2024-08-13 15:11:28  DONE: Patch installation Succeeded.
9997    CLI       Health Check for GPU installati 2024-08-14 10:48:19  WARNING: Review health check log file.
491     CLI       Update Bundle for GPU 400 (Jul  2024-08-14 13:32:25  DONE: Patch installation Succeeded.
9998    CLI       Health Check for v12 upgrade in 2024-08-15 11:38:36  ERROR: Patch Installation Failed - Recovery from pre patch backup Succeeded

Mark Harris's profile image
Mark Harris

Hi,

So their is newer bundles than p491, so that might be a good idea.

Also check the sniffer bundle as well.

So after that, the next step is to install p9997 again, and review the health check log, against the p9997 release notes.

Hope that helps.