Working in Management hub

Edit online

As the name suggests, the Management hub in IBM® Guardium® Exposure Manager provides a hub to manage workflows, tasks, data classification, trusted destinations, connections, workforce agents, integrations, and tenant settings.

From the main menu, when you click Management hub, you can navigate to any of the following pages:

  • Workflows
  • Tasks
  • Data classification
  • Trusted destinations
  • Connections
  • Workforce agent
  • Integrations
  • Tenant settings

Workflows

From the main menu, when you click Management hub > Workflows, you can create a sequence of connected steps with a defined output to automate work and manage tasks.

Tasks

From the main menu, when you click Management hub > Tasks, you can see tasks, which are units of work generated by a workflow that help you track events requiring investigation or follow up. Filter on tasks assigned to you or view details of all tasks.

Data classification

From the main menu, when you click Management hub > Data classification, you can manage data classifications and control how they are used to scan and detect sensitive data.

Trusted destinations

Trusted destinations include applications that are the destination of a file sharing and are trusted by your organization. From the main menu, when you click Management hub > Trusted destinations, you can manage the destinations that are trusted by your organization. Based on the trusted destinations you can create policies to manage enterprise data security and adopt AI safely.

Complete the following steps to add a trusted application or a cloud storage as a trusted destination.

  1. From the main menu, click Management hub > Trusted destinations .
  2. On the Trusted destinations page, click Add.
  3. In the Choose destination step of the Add trusted destination wizard, select an application or a cloud storage, and then click Next.
  4. In the Setup destination step of the Add trusted destination wizard, enter the following configuration details:
    • Enter Application name to provide a unique name for the trusted destination application.
    • Enter URL patterns, separated by commas.
    • Enter Process pattern, separated by commas.
    Note:

    For applications that are Network Share/Drive or Removable Media types, you do not need to configure the Process and URL Pattern.

  5. Click Save.

To edit a trusted destination, select the trusted destination listed in the Trusted destinations page, click Edit, update the URL patterns and Process pattern, and then click Save.

You can toggle the Status of a trusted destination to Active or Inactive to enable or disable the application or cloud storage as a trusted destination, and thereby affect policies.

Connections

From the main menu, when you click Management hub > Connections, you can view all your existing connections to Guardium and connect new ones. For more information, see Managing connections.

Workforce agent

From the main menu, when you click Management hub > Workforce agent, you can deploy agents to your devices to detect and monitor sensitive data across your endpoint environment.

After you deploy an agent, you can download the latest version of the agent by clicking the Download link in the Workforce agent page. After downloading the agent, follow the on-screen instructions to onboard the agent to upgrade and deploy the latest version of the agent.

You can uninstall the agent, if required.

Note: The uninstall command must be run by a user with local administrator privileges. No additional prerequisites are required apart from the agent being installed.

To uninstall the agent by using the MSI file:

  1. Open an elevated PowerShell or command prompt in the directory where the MSI file is located.
  2. Run the following command: 
    msiexec.exe /x "IBM_Guardium_1.0.3_x64.msi" /qn /L*v "$env:TEMP\guardium-uninstall.log"

    You can also provide the complete path to the MSI file instead of running the command from the directory where the file is located.

To uninstall the agent by using the product code, when the MSI file is not available:

  1. Open an elevated PowerShell or command prompt.
  2. Run the following command to get ProductCode or GUID of the installed agent. 
    Get-ItemProperty `
  "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*", `
  "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" `
  -ErrorAction SilentlyContinue |
Where-Object { $_.DisplayName -eq "IBM Guardium Workforce Agent" } |
Select-Object DisplayName, PSChildName
  3. Run the following command by replacing ProductCode with the GUID of the installed agent: 
    msiexec.exe /x "{ProductCode}" /qn /L*v "$env:TEMP\guardium-uninstall.log"
Parameter Description
/qn Performs a silent uninstall with no user interface.
/L*v Generates a verbose uninstall log in the user's temporary directory.
Note: If the uninstall operation is interrupted and the MSI registration becomes corrupted, the agent might remain in an inconsistent state and require forced cleanup. This is standard Windows Installer behavior and is not specific to the IBM Guardium agent.

Integrations

From the main menu, when you click Management hub > Integrations, you can integrate IBM Guardium Exposure Manager with independent applications or protocols to expand capabilities for handling security data. For more information, see Setting up integrations.

Tenant settings

From the main menu, when you click Management hub > Tenant settings, you can manage options that are specific to the tenant.