Editing the protocol 7 and protocol 8 S-TAP configuration parameters

You can modify the S-TAP configuration after it is installed by using Guardium®, Guardium Installation Manager (GIM) or for advanced users, the configuration file on the database.

Note: Parameters in the GUI can be safely changed. Parameters that are not in the GUI are advanced and rarely need changing. They are for use by Guardium support or advanced users.
Attention: If a parameter is available through both the GIM and the command line interface (CLI), then the GIM parameter, including any defaults, always overwrites any value that is available from WINSTAP_CMD_LINE.
CAUTION:
Modify advanced parameters only if you are an expert user or you have consulted with IBM Technical Support.

You can modify some parameters in the GUI. See Configuring S-TAP in the S-TAP Control page.

GIM is an easy method for modifying parameters, if the S-TAP bundle was installed with GIM. For more information, see Set up by Client. You can input any parameter in the Setup by Client page, in the Choose parameters row, by using the command WINSTAP_CMD_LINE with the syntax parameter=value for [TAP] parameters, and it is added or updated in the guard_tap.ini.

CAUTION:
Input is not validated when you use the WINSTAP_CMD_LINE command. Whenever possible, use the relevant configuration parameter rather than WINSTAP_CMD_LINE.

For example, to change USE_TLS, edit USE_TLS in the WINSTAP_USER_TLS parameter.

If you need to modify the configuration file from the database server, perform the steps that are described in the following section.

If you set a parameter to a value outside of its supported range, it is flagged as an error in the CTL file (showing both the invalid value and the default value), and the value reverts to its default value.

After you modify the guard_tap.ini, restart the S-TAP. If you're using GIM, it restarts the S-TAP automatically.

CAUTION:
Add the parameters to their relevant section: [Version], [TAP], [SQLGuard], [DB_<name>].
  1. Log on to the database server system by using the root account.
  2. Stop the S-TAP.
  3. Make a backup copy of the configuration file: guard_tap.ini. The default file location is \Program Files\IBM\Windows S-TAP\Bin\
  4. Open the configuration file in a text editor.
  5. Edit the file as necessary.
  6. Save the file.
  7. Restart the S-TAP and verify that your changes are incorporated.