IBM Security Guardium

 View Only
  • 1.  Guardium DSM Upgrade to 6.4.3

    Posted Tue November 24, 2020 12:43 PM

    Greetings!

    Hi Data Security Team,


    Need your suggestion on DSM Upgrade -

    I am planning to have our DSM upgrade from current version 6.0.2 to 6.4.2 OR 6.4.3. Would request you to please suggest me the steps to do it in HA environment.

    Regards



    ------------------------------
    vijay jamwal
    ------------------------------


  • 2.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Wed November 25, 2020 02:10 AM

    Hi,

    Upgrade is very well described in the documentation.
    Generally you must:
    - remove DSMs from cluster
    - upgrade each DSM separately
    - join all DSMs together after upgrade
    You should not:
    - Change agents configuration during upgrade
    DSM upgrade is transparent to agents



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 3.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon November 30, 2020 02:11 PM
    Hi Vijay,

    You will likely need to perform the upgrade in 2 stages based on your current DSM version. Also, there is a port update you may need to check and request an update if Firewall is been used.

    Please, check the documentation.

    Thank you!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------



  • 4.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Thu December 03, 2020 08:08 AM
    If I recall, there is no upgrade path from 6.0.2 to 6.4.x, one of the reason I can recall is the DB used for 6.4.x is different than 6.0.2.

    Thales support recommend to built the 6.4.x and restore the configuration from 6.0.2.

    ------------------------------
    TS Teh
    ------------------------------



  • 5.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Fri December 04, 2020 12:49 PM
    I might have to upgrade DSM first to 6.4.2 and then to 6.4.3 ----
    One of the do c u m e n t suggest that DSM has to be at 6.4.2 to upgrade to the latest 6.4.3

    Any thoughts?

    ------------------------------
    vijay jamwal
    ------------------------------



  • 6.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Fri December 04, 2020 01:08 PM
      |   view attached
    Hi Vijay,

    When we upgraded from 6.1 to 6.3 we had to do it in 2 stages (1st upgrade to 6.1.0.9229 and then, to 6.3) because there a significant change as they've replaced the embedded database. I've attached the installation guide I've used... 

    Please, look to the Thales/IBM upgrade documentation for the version you're going to that I believe it may be similar.

    Thanks again!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------

    Attachment(s)



  • 7.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon January 25, 2021 03:11 PM

    Hi All

    Thanks for the input and document -- it helped

    The upgrade path I am going to follow is   - DSM v6.0.2 >>>> v6.1.9229 >>>> v6.3.0.1303 >>>> v6.4.2.16023

    I have a next question on  -- "convert2failover" and "long join"  (I understand that both the commands are used to bring the nodes into cluster again)

    1> Lets say I have upgrade  DSM from v6.0.2 to  v6.1.9229 and want to bring my cluster up  after one HOP upgrade............. So at this point do I need to use convert2failover or "long join" can also work. Will long join working on version below to v6.4.2.16023?

    Sorry for my english. I hope I was able to explain my doubt ..
    Kindly assist.

    Thanks,
    VIjay



    ------------------------------
    vijay jamwal
    ------------------------------



  • 8.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Mon January 25, 2021 04:42 PM
    Hi Vijay,

    I believe that may be as simple as :
    1) If you already upgraded to that version, to go to 'cli command' , 'ha' menu option and type '?'. It should list the options there and one of the options... if I remember correctly, it may be 'join' for v6.1.9229
    2) If not installed yet, to check on the admin guide for the 'ha' menu option for the available commands 

    I hope that helps..

    Thanks again!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------



  • 9.  RE: Guardium DSM Upgrade to 6.4.3

    Posted Tue January 26, 2021 06:34 AM

    Hi,
    Between 602 and 642 the DSM architecture changed from Active-Passive to Active-Active cluster deployment.
    So in the new architecture there is no longer failover DSM. You need only destroy cluster before patching and join nodes together after upgrade.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------