IBM Security Guardium

 View Only
Expand all | Collapse all

Identifying the initial node on a GDE 4.0.0.1 Cluster

  • 1.  Identifying the initial node on a GDE 4.0.0.1 Cluster

    Posted Thu May 16, 2024 11:24 AM

    Greetings!

    Hi Data Security Team,

    Hope you can enlighten me on this.

    We are planning to upgrade GDE 4.0.0.1 to 4.0.0.4 then to 4.0.0.9 in preparation for migrating it to a GDE 5.1.0 (CTM).

    Upon reviewing the documentation, it tells that the upgrade should be done on the initial node. The steps are:

    1. Break the DSM Cluster
      1. remove fail-over nodes
      2. login to fail-over nodes, then cleanup HA config
    2. Upgrade the initial node
    3. Upgrade the failover nodes
    4. Rebuild the cluster

    I am not the one who built the environment and the team members are having trouble finding the old records for this environment.

    My question is, how can I identify what node is the initial node?

    On GDE 3.0, it is easy to identify the initial node because you can only apply changes on the initial node and fail-over nodes are on READ ONLY mode by default. However, from what I have observed, the default for GDE 4.0 fail-over nodes are no longer in READ ONLY.

    Are there indicators in the GUI that I may have missed?

    When I check the console, and run ha >> show  , it only shows the list of nodes in alphabetical order and no indicators for the initial node.

    Regards,

    - Julius



    ------------------------------
    Julius Ballesteros
    ------------------------------


  • 2.  RE: Identifying the initial node on a GDE 4.0.0.1 Cluster

    IBM Champion
    Posted Thu May 16, 2024 11:32 AM

    Hi @Julius Ballesteros,

    Upgrading from GDE v4x to GDE v5x requires a rehost and migration. Thales changed the product between versions, so you would be going from Data Security Manager (DSM) to CipherTrust Manager (CTM).  You'll want to review this documentation: Migrate from Data Security Manager.



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    wendy.zemba@convergetp.com
    Converge Technology Solutions

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------

    Original Message