IBM Support

Uninstalling IBM Security Guardium Key Lifecycle Manager V4.1 on Windows

Fix Readme


Abstract

To uninstall IBM Security Guardium Key Lifecycle Manager V4.1 on Windows, you must use the uninstallation script provided with this document.
Note: Do not use the uninstallation script that comes with the default installation of IBM Security Guardium Key Lifecycle Manager V4.1.

Content

The uninstallation script uninstalls these components of V4.1:

  • WebSphere Application Server
  • Guardium Key Lifecycle Manager application
  • WebSphere Java SDK

Important: The Db2 instance that is used by V4.1 is dropped, but the Db2 database is not uninstalled. You must uninstall Db2 manually if required.

The uninstallation process involves the following steps:

1. Prepare for the uninstallation.

2. Uninstall GKLM V4.1.

3. (Optional) Uninstall Db2 manually.

1. Prepare for the uninstallation

1. Download the uninstallation script. 

2. Extract the uninstallation script (Right-click the downloaded compressed file and select Extract All).

3. Go to the disk1 directory of your installation package for V4.1. For example, download_path/disk1.

4. Replace the uninstallation scripts and response file in the disk1 directory with the extracted files.

Back to top

2.a. Uninstall in graphical mode

1. Open the command prompt.

2. Stop the WebSphere Application Server by using the following commands: 

cd C:\Program Files\IBM\WebSphere\AppServer\bin
.\stopServer.bat server1 -username wasadmin -password mysecretpwd
3. Change directory to the disk1 directory of your installation package.
  
cd download_path/disk1
4. Run the following command.
  
uninstallSKLM.bat IM_INSTALL_LOCATION WAS_INSTALL_LOCATION SKLM_INSTALL_HOME WAS_ADMIN WAS_PASSWORD

Where,

  • IM_INSTALL_LOCATION is the Installation Manager directory for IBM Security Guardium Key Lifecycle Manager.
  • WAS_INSTALL_LOCATION is the WebSphere Application Server directory for IBM Security Guardium Key Lifecycle Manager.
  • SKLM_INSTALL_HOME is the IBM Security Guardium Key Lifecycle Manager installation directory.
  • WAS_ADMIN is the user name of WebSphere Application Server for IBM Security Guardium Key Lifecycle Manager.
  • WAS_PASSWORD is the password of WebSphere Application Server user.
For example:
  
uninstallSKLM.bat "C:\Program Files\IBM\Installation Manager" "C:\Program Files\IBM\WebSphere\AppServer" "C:\Program Files\IBM\SKLMV41" wasadmin WAS@admin123
 
5. The IBM Installation Manager window opens. Click Uninstall.
 
IBM Installation Manager

6. Select the check boxes to uninstall IBM Security Guardium Key Lifecycle Manager V4.1 and WebSphere Application Server.

Note: If WebSphere Application Server is not stopped before you uninstall IBM Security Guardium Key Lifecycle Manager, the following false message is displayed.

Running processes have been detected that may interfere with the current 
operation. Stop all WebSphere and related processes before continue.

Stop the WebSphere Application Server (See Step 2). Click Recheck Status to proceed with the uninstallation task.

7. Click Next. Type the WebSphere Application Server Administrator user ID and the password.

8. Click Next. The Summary window opens.

9. Review the software packages to be uninstalled and their installation directories.

10. Click Uninstall.

11. After uninstallation is complete, a confirmation window is displayed. Click Finish.

Uninstall Complete

Back to top

2.b. Uninstall in silent mode

1. Edit the SKLM_Uninstall_Win_Resp.xml response file to add encrypted passwords to the relevant elements of the file. 

        Use the IBM Installation Manager utility to create encrypted passwords. To do so, follow these steps:

       a. Open command line and change directory to the IM_INSTALL_LOCATION/eclipse/tools directory.
          
    cd C:\Program Files\IBM\Installation Manager\eclipse\tools
         
       b. Run the following command to generate an encrypted password:
   
    imcl.exe encryptString PASSWORD

           Where, PASSWORD is the password you want to encrypt.

       c. In the SKLM_Uninstall_Win_Resp.xml response file, add the encrypted password to the following element: 

<data key='user.WAS_ADMIN_ID,com.ibm.sklm41.win' value='wasadmin'/>
<data key='user.WAS_ADMIN_PASSWORD,com.ibm.sklm41.win' value='fufgZbY47EfxLYarBAIxeQ=='/>

2. Change directory to the disk1 directory of your installation package.

3. Run the following command:

silent_uninstallSKLM.bat IM_INSTALL_LOCATION WAS_INSTALL_LOCATION SKLM_INSTALL_HOME 
WAS_ADMIN WAS_PASSWORD

Where,

  • IM_INSTALL_LOCATION is the Installation Manager directory for IBM Security Guardium Key Lifecycle Manager.
  • WAS_INSTALL_LOCATION is the WebSphere Application Server directory for IBM Security Guardium Key Lifecycle Manager.
  • SKLM_INSTALL_HOME is the IBM Security Guardium Key Lifecycle Manager installation directory.
  • WAS_ADMIN is the user name of WebSphere Application Server for IBM Security Guardium Key Lifecycle Manager.
  • WAS_PASSWORD is the password of WebSphere Application Server user.
For example:
silent_uninstallSKLM.bat "C:\Program Files\IBM\Installation Manager" "C:\Program Files\IBM\WebSphere\AppServer" "C:\Program Files\IBM\SKLMV41" wasadmin WAS@admin123

3. Uninstall Db2 manually

The uninstallation script does not uninstall Db2. You can delete it manually using the following steps:

Before you begin, verify that the Db2 instance is deleted.

1. Go to C:\Program Files\IBM\DB2SKLMV41\BIN.

cd C:\Program Files\IBM\DB2SKLMV41\BIN

2. Run the following command to list Db2 instances:

C:\Program Files\IBM\DB2SKLMV41\BIN>db2ilist

If no Db2 instance is listed, then it means that the Db2 instance is successfully deleted.

To uninstall Db2 manually, complete the following steps:

Step 1: If you have more than one Db2 copy installed, promote the Db2 copy you want to keep as the default Db2 copy.
             Skip this step if you have only one Db2 copy installed.
Step 2: Uninstall the non-default Db2 from the Windows Control Panel.

Step 1: Promote the Db2 copy you want to keep as the default Db2 copy.
(If you have only one Db2 copy installed, skip this step and directly go to Step 2.)

To do so, follow these steps:

1. List all the Db2 copies installed on the system by using the following command:
db2swtch.exe -l

The default Db2 copy is shown in the output:

C:\Program Files\IBM\DB2GKLMV411\BIN>db2swtch.exe -l

sklmdb41    C:\Program Files\IBM\DB2SKLMV41    (Default DB2 copy)
klmdb411    C:\Program Files\ibm\DB2GKLMV411    (Default IBM Database Client Interface Copy)
2. To switch the default Db2 copy, run the following commands:
cd DB2_INSTALL_DIR\BIN
db2swtch.exe -d DB2_COPY

Where,

  • DB2_INSTALL_DIR is the directory for the Db2 copy you want to keep. For example, if you upgraded to V4.1.1,  DB2_INSTALL_DIR is C:\Program Files\IBM\DB2GKLMV411\BIN.
  • DB2_COPY is the Db2 copy that you want to keep. For example, klmdb411.

Note: Ignore the following error message that you get during the promotion. 

DB22002E  An error occurred during the promotion of the copy "". The promotion will continue and this copy will be assigned as the default on the system.

Switching is successful. The current default DB2 and IBM database client interface copy is klmdb411.The DB2 Administration Server for your computer has not been changed. To move the DB2 Administration Server to the new default DB2 copy on your computer, use dasupdt command. For more information on the dasupdt command, see the DB2 Information Center or the Command Reference.
3. Verify that the Db2 copy that you want to keep is set as default. 
C:\Program Files\IBM\DB2GKLMV411\BIN>db2swtch.exe -l

klmdb411    C:\Program Files\ibm\DB2GKLMV411    (Default DB2 and IBM Database Client Interface Copy)
sklmdb41    C:\Program Files\IBM\DB2SKLMV41

Step 2: Uninstall the non-default Db2 copy by using the Windows Control Panel.

1. In the search box on the taskbar, type Control Panel and select it from the results.
2. Select Programs > Programs and Features.
3. Right-click Db2 Server Edition - sklmdb41, and select Uninstall. Then, follow the Db2 uninstall directions on the screen.
Uninstall Db2 Confirmation

Back to top

What to do next

Verify the uninstallation summary and the log files that are at C:\ProgramData\IBM\InstallationManager\logs\sklmLogs\.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTJE47","label":"IBM Security Guardium Key Lifecycle Manager"},"ARM Category":[{"code":"a8m0z000000cvdRAAQ","label":"SKLM->INSTALL->MIGRATION"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"4.1.0"}]

Document Information

Modified date:
27 September 2021

UID

ibm16491079

Page Feedback