Upgrading the S-TAP from 10.x to 11.x for IBM i

About this task

Procedure

  1. Use FTP to save the 11.3 itap onto iSeries using binary mode. For example,
    ftp <server name>
    username/password
    cd /usr/diver
    binary
    put itap-11.3.sh
  2. Stop the v10.0.0 itap audit server in the 5250 terminal with:
    RUNSQL SQL('CALL SYSPROC/SYSAUDIT_END( )') COMMIT(*NONE)
  3. Upgrade the i S-TAP
    CALL QP2TERM
    $
    > cd /usr/diver
    $
    > itap-11.3.sh --sqlguardip guardclient.rch.stglabs.ibm.com -u
    Verifying archive integrity... All good.
    Uncompressing guard-itap..............
    Checking whether Audit Server has been stopped. (This call may take a minute.
    Please wait.)
    Uninstalling.
    Creating /usr/local/guardium directory.
    Using sqlguard_ip=guardclient.rch.stglabs.ibm.com
    Starting Audit Server.
    $
    
    The upgrade is successful. 
  4. Verify the upgrade.
    1. In the 5250 terminal, verify that this string appears: /istap log_file=
      > ps -ef
      UID PID PPID C STIME TTY TIME CMD
      qsecofr 10 8 0 Dec 03 - 0:23 /QOpenSys/QIBM/ProdData/JavaVM
      qsys 58 1 0 Dec 03 - 14:07 /QIBM/ProdData/OS/SLP/bin/lslp
      ruiyu 754 753 0 Feb 18 - 0:00 /QOpenSys/usr/bin/-sh -i
      qlwisvr 857 1 0 Feb 26 - 4:39 /QOpenSys/QIBM/ProdData/JavaVM
      qlwisvr 858 1 0 Feb 26 - 10:21 /QOpenSys/QIBM/ProdData/JavaVM
      qlwisvr 859 1 0 Feb 26 - 0:40 /QOpenSys/QIBM/ProdData/JavaVM
      qlwisvr 860 1 0 Feb 26 - 0:33 /QOpenSys/QIBM/ProdData/JavaVM
      4294770734 861 1 0 Feb 26 - 0:44 /QOpenSys/QIBM/ProdData/JavaVM
      richoj 1102 988 0 17:56:33 - 0:00 /QOpenSys/usr/bin/-sh -i
      richoj 1243 1236 0 17:57:53 - 0:00 ./istap log_file=
      richoj 1244 1102 0 17:58:35 - 0:00 ps -ef
      $ 
    2. In the 5250 terminal, verify that you see the 11.3x.0.swidtag
      > cd /usr/local/guardium/
      > ls
      LICENSE.TXT istap sqsh
      guard_itap.stderr.1.txt istap_console.socket sqsh_write_file
      guard_tap.ini just_send swidtag
      install_out.txt libprotobuf.a uninstall
      $
      > cd swidtag
      $
      > ls
      ibm.com_IBM_Security_Guardium_Data_Protection-11.3.0.swidtag
      $ 
    3. In the Guardium S-TAP Control page, verify that the 11.x itap connections are green for iSeries 7.4 (SQ740) and iSeries 7.3 (UT28P55).