Upgrading the S-TAP from 10.x to 11.x for IBM i
About this task
Procedure
-
Use FTP to save the 11.3 itap onto iSeries using binary mode. For example,
ftp <server name> username/password cd /usr/diver binary put itap-11.3.sh
- Stop the v10.0.0 itap audit server in the 5250 terminal with:
RUNSQL SQL('CALL SYSPROC/SYSAUDIT_END( )') COMMIT(*NONE)
- Upgrade the i S-TAP
CALL QP2TERM $ > cd /usr/diver $ > itap-11.3.sh --sqlguardip guardclient.rch.stglabs.ibm.com -u Verifying archive integrity... All good. Uncompressing guard-itap.............. Checking whether Audit Server has been stopped. (This call may take a minute. Please wait.) Uninstalling. Creating /usr/local/guardium directory. Using sqlguard_ip=guardclient.rch.stglabs.ibm.com Starting Audit Server. $ The upgrade is successful.
- Verify the upgrade.
- In the 5250 terminal, verify that this string appears: /istap
log_file=
> ps -ef UID PID PPID C STIME TTY TIME CMD qsecofr 10 8 0 Dec 03 - 0:23 /QOpenSys/QIBM/ProdData/JavaVM qsys 58 1 0 Dec 03 - 14:07 /QIBM/ProdData/OS/SLP/bin/lslp ruiyu 754 753 0 Feb 18 - 0:00 /QOpenSys/usr/bin/-sh -i qlwisvr 857 1 0 Feb 26 - 4:39 /QOpenSys/QIBM/ProdData/JavaVM qlwisvr 858 1 0 Feb 26 - 10:21 /QOpenSys/QIBM/ProdData/JavaVM qlwisvr 859 1 0 Feb 26 - 0:40 /QOpenSys/QIBM/ProdData/JavaVM qlwisvr 860 1 0 Feb 26 - 0:33 /QOpenSys/QIBM/ProdData/JavaVM 4294770734 861 1 0 Feb 26 - 0:44 /QOpenSys/QIBM/ProdData/JavaVM richoj 1102 988 0 17:56:33 - 0:00 /QOpenSys/usr/bin/-sh -i richoj 1243 1236 0 17:57:53 - 0:00 ./istap log_file= richoj 1244 1102 0 17:58:35 - 0:00 ps -ef $
- In the 5250 terminal, verify that you see the
11.3x.0.swidtag
> cd /usr/local/guardium/ > ls LICENSE.TXT istap sqsh guard_itap.stderr.1.txt istap_console.socket sqsh_write_file guard_tap.ini just_send swidtag install_out.txt libprotobuf.a uninstall $ > cd swidtag $ > ls ibm.com_IBM_Security_Guardium_Data_Protection-11.3.0.swidtag $
- In the Guardium S-TAP Control page, verify that the 11.x itap connections are green for iSeries 7.4 (SQ740) and iSeries 7.3 (UT28P55).
- In the 5250 terminal, verify that this string appears: /istap
log_file=