Windows: Installing S-TAP agent using the interactive installer

The interactive installer is useful for smaller deployments or whenever a guided, step-by-step installation experience is required.

Before you begin

Verify the following before you begin:
  • Review the Windows S-TAP installation requirements at Windows: Prerequisites: installing S-TAP.
  • Verify that your database server and operating system are supported.
  • Identify the IP address of the database server or domain controller where you will install the S-TAP, including any virtual IP addresses.
  • Identify the IP address of the Guardium system that will control the S-TAP.
  • Verify that the intended S-TAP installation directory is empty or does not exist.
  • Obtain the S-TAP module from either Fix Central, or your Guardium representative.

About this task

When installing an S-TAP on a database server, you must provide the IP address or host name of the Guardium system that will receive data from the S-TAP. After the S-TAP has connected to the Guardium system, navigate to the Manage > Activity Monitoring > S-TAP Control page and complete the S-TAP configuration.

Note: Windows S-TAP parameters cannot be changed via the interactive installer during upgrading. The user can use the GUI after the upgrade to change Windows S-TAP parameters.


  1. Log on to the database server using a system administrator account.
  2. Copy the S-TAP module to your database and start the Guardium Windows S-TAP Install Wizard.
    Attention: When installing an S-TAP on Windows 2012 or later, you must use administrative privileges. To do this, right-click the installer and choose Run as Administrator.
  3. Read the license agreement on the Guardium License screen. To continue installation, select I accept the terms of the license agreement and click Next.
  4. Provide the requested content on the Customer Information screen, then click Next to continue. The default values are appropriate for most installations.
  5. Select one of the following installation types, and then click Next to continue:
    • Typical: a typical installation will be appropriate for most users.
    • Compact: a compact installation assumes that additional features such as Enterprise Load Balancing are not required.
    • Custom: a custom installation allows you to modify additional S-TAP installation options such as the software choices, installation directory and the user account that runs the Windows S-TAP process.
  6. Optionally, enable Enterprise Load Balancing by selecting the Enable Load Balancing checkbox on the Load Balancing Options screen. Click Next to continue.
    1. If you enable Enterprise Load Balancing, provide the load balancer IP address in the Load Balancer Host Address field.
    2. Click the Advanced Options button to specify any additional Enterprise Load Balancing options. For more information, see Enterprise Load Balancing.
  7. Verify the Software Tap Host Address and provide Appliance Address(es) on the Network Addresses screen, then click Next to continue.
    • The Software Tap Host Address specifies the address of the local machine where the S-TAP is being installed.
    • The Appliance Address(es) specify the Guardium system addresses that will control the S-TAP. Provide multiple addresses (typically not more than three) on separate lines to establish failover systems for the S-TAP or when configuring S-TAP load balancing with the participate_in_load_balancing parameter.
    Attention: If you do not want the S-TAP service to be enabled after installation, deselect the Start S-Tap Service checkbox. Deselecting the Start S-Tap Service checkbox also disables the automatic discovery of databases and creation of inspection engines.
    The Install Wizard Completed screen appears following a successful installation.
  8. Click Finish to close the installer.

What to do next

Verify that the S-TAP is communicating with the Guardium system by navigating to Manage > Activity Monitoring > S-TAP Control and reviewing the S-TAPs status and configuration.