IBM Security Guardium

 View Only
  • 1.  Error when I install the GIM agent

    Posted Thu March 14, 2024 04:52 PM

    Hi,

    I am trying to install the GIM agent on Ubuntu server 20.04, but when the installation finishes I get the following message:

    Failed sending REGISTER message to x.x.x.x:8446 (400,140388551206592:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:102:
    140388551206592:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:786:
    140388551206592:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:a_verify.c:218:
    140388551206592:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:s3_clnt.c:1268:)

    I am using version 11.4 of Guardium.

    thanks in advance.



    ------------------------------
    Andres Lopez
    ------------------------------


  • 2.  RE: Error when I install the GIM agent

    Posted Tue May 14, 2024 03:49 AM

    Did you resolve this problem? I have a same



    ------------------------------
    Levani Chubinidze
    ------------------------------



  • 3.  RE: Error when I install the GIM agent

    Posted Tue May 14, 2024 04:19 AM

    Hi,

    yeah, I solved it.

    It is possible that your Guardium system does not support SHA256 Certificates and you are trying to install a version of the GIM agent that works with SHA256.

    The easy solution is to use a version of the GIM agent that works with SHA128, such as 11.4.0.0 (ends up being limiting in the future).

    The recommended solution is to update the appropriate patches for your Guardium system and accept SHA256 certificates to be able to use the latest versions of the GIM agents. What version of Guardium do you currently have? and What patch do you currently have?



    ------------------------------
    Andres Lopez
    ------------------------------



  • 4.  RE: Error when I install the GIM agent

    Posted Tue May 14, 2024 05:29 AM

    I use the latest patch p490 for 11.4.0
    as I check collector use sha-256
              Signature algorithm name: SHA256withRSA
               Version: 3

    I run the installer on redhat 7.9 and whilie it's installing there is same error

    Failed sending REGISTER message to x.x.x.x:8446 (400,140388551206592:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:102:
    140388551206592:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:786:
    140388551206592:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:a_verify.c:218:
    140388551206592:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:s3_clnt.c:1268:)



    ------------------------------
    Levani Chubinidze
    ------------------------------



  • 5.  RE: Error when I install the GIM agent

    IBM Champion
    Posted Tue May 14, 2024 08:24 AM

    Hi @Levani Chubinidze:

    For your situation are you trying to install a new GIM or upgrade an existing one?



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    wendy.zemba@convergetp.com
    Converge Technology Solutions

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------



  • 6.  RE: Error when I install the GIM agent

    Posted Thu May 16, 2024 02:57 AM
    Edited by Levani Chubinidze Thu May 16, 2024 02:57 AM

    I installed 11.4.6.1 version and it's work, thank you.



    ------------------------------
    Levani Chubinidze
    ------------------------------