IBM Security Guardium

Expand all | Collapse all

Guardium Upgrade steps for CM, Aggregators, Collectors?

  • 1.  Guardium Upgrade steps for CM, Aggregators, Collectors?

    Posted Tue June 29, 2021 12:45 AM
    HI Everyone,

    If we need to do Version upgrade 11.0 to 11.3 for Central Managers (1), Aggregators (3) and Collectors (15) for big environments.
    How can we proceed on it?
    How much time does CM, Aggregator and Collector takes?
    Do we need to upgrade CM first, Aggregator - second and Collector - finally?
    Once CM finishes upgrading, do we need to wait for one or two days before starting upgrading Aggregators & Collectors?
    What are the challenges we face during upgrade?

    Does GIM & STAP running with V11.0 and V11.2 is compatible with 11.3 Version Collectors or is it mandatory to upgrade GIM & TAP also?

    Panendar Rao.C


  • 2.  RE: Guardium Upgrade steps for CM, Aggregators, Collectors?

    Posted Tue June 29, 2021 09:30 AM
    He Panendar:

    Start with the CM, then Aggregators and finally the collectors. The time that this takes depends of the how much information have the machine. In the collectors with small DB the time could be 20 minutes to 1 hour. But, if the DB is near to 70% used, this could be 1 day. When the upgrade going in reorganizing the DB the system doesn't respond and the commands is limited in the CLI mode.
    The upgrade of collectors, must be after the upgrade of Aggregators and you can start the upgrade in all collectors simultaning, using the CM install interface. 
    After the system ends the upgrade, install the last Sniffer patchs.
    The GIM and STAP working fine with older version, but IBM recommends uprade them. Caution with upgrade the STAP, you could be need restart DB server, this is because the KTAP is also upgraded and the only chance to start the new KTAP is restarting.

    I have war wounds updating version 11.

    Hope this help.


    Carlos Espinoza Chandia