IBM Support

Release of Guardium Data Protection Windows GIM v12.0.0.183

Release Notes


Abstract

This technical note provides guidance for installing IBM Security Guardium Data Protection Windows Agents v12.0.0.183, including any new features or enhancements, resolved or known issues, or notices associated with the patch.

Content

Patch information

Product: IBM Security Guardium
Release version: Guardium 12.0 Windows GIM
Completion date: 24 May 2024

Fix IDs

Guardium_12.0.0.183_GIM_Windows
Guardium_12.0.0.140_FAM_Crawler_Windows
Guardium_12.0.0.140_GUC_Windows

Finding the patch

This document provides a reference to the contents of this patch. If applicable, the detailed description of each fix and instructions for applying this patch are contained within the download package. The actual package is available for downloading from the IBM Fix Central website at http://www.ibm.com/support/fixcentral/

Make the following selections on Fix Central:
Product selector:           IBM Security Guardium
Installed Version:          12.0
Platform:                          Windows

Click "Continue", then select "Browse for fixes" and click "Continue" again.

Attention

SHA256 GIM client certificates
Guardium 12.0 or newer supports SHA256 GIM certificates. This has the following implications:
  • If using default certificates, GIM connections are secured using SHA128. Custom certificates using SHA256 are more secure and are recommended for GIM connections. 
    Note that GIM connectivity is not interrupted after applying this patch.
  • GIM only verifies bundles signed with SHA256 and requires installing a transitional GIM bundle to support the change from SHA128 to SHA256. 

For more information, see Updating Guardium Data Protection GIM clients with SHA256 certificates.

Guardium GIM SHA128  
Certificates is set to expire May 2024. If the certificates are not renewed by the expiration date, the GIM client-server communication will be affected. Please note that data monitoring activity through STAP will not be disrupted. 
  • To renew GIM server (appliance) certificate install 12.0p1002. 
  • To renew GIM clients (database server agent) certificate, upgrade to v12.0.0.183 or newer.  
Refer to the following Flash alert for more information: https://www.ibm.com/support/pages/node/7115129 

Deprecated support and functionality

Windows Server 2012 and 2012 R2  
Windows Server 2012 and 2012 R2 have reached end of support by Microsoft on October 10, 2023 and will no longer receive security updates. For this reason, as of March 31, 2024, Guardium can no longer maintain support for these operating systems. For more information, please see:  IBM Security Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2 

Microsoft SQL Server 2012 
IBM Security Guardium no longer supports Microsoft SQL Server 2012 as of July 12, 2022. For more information, please see: IBM Security Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012 

New features and enhancement

Must Gather v3.1
As with previous versions, Must Gather continues to aid customers and support teams in troubleshooting issues by gathering and uploading debugging information. V3.1 adds a parsing option delivered by a new PowerShell script that aggregates important information from many files into a simple summary. For more information, see Must gather for Windows S-TAP and other Windows agents.

Resolved issues

Guardium Windows GIM v12.0.0.183
Patch Issue Key Summary APAR
(Known Issue)
v12.0.0.140 Link to v12.0.0.140 on Fix Central
v12.0.0.151 Link to v12.0.0.151 on Fix Central
v12.0.0.183 GRD-79901 SHA1 certificates have been re-introduced within GIM clients. This functionality is useful when installing new clients with SHA1 communication. In addition, if SHA1 certificates were not renewed and the expiry date has passed, user will need to:

1) Install the correct appliance patch with updated certificate for your appliance version. For more information, see https://www.ibm.com/support/pages/node/7115129
2) Install a GIM client which contains the updated certificate, v12.0.0.183 or newer, directly on database server.
Guardium Windows FAM Crawler v12.0.0.140
Patch Issue Key Summary APAR
(Known Issue)
v12.0.0.140 Link to v12.0.0.140 on Fix Central
Guardium Windows GUC v12.0.0.140
Patch Issue Key Summary APAR
(Known Issue)
v12.0.0.140 Link to v12.0.0.140 on Fix Central

Installers with MD5Sums

MD5Sum File Name
9c5dabdf4ad12383904f7acedd000eee GIM-Installer-12.0_r120000183_1.zip
2440de251558ace33eb007ff9c13c2a1 guard-GIM-12.0_r120000183_1-x86_x64.gim
56a85a53cf5258c85bbb1f995558756b guard-GIM-guardium_12.0_r120000183_1-Windows-Server-Windows-x86_x64.exe.signed
568d28da47f372a01d7f5e07805d1331 guard-GIM_transitional-12.0_r120000183_1-x86_x64.gim
322ee18ce79f98ee7b5eae84790f1c91 conf.reload.FAM
6941a6bbf05c20a8c537d5d4cc86dc21 guard-FAM-12.0_r120000140_1-x86_x64.gim
3ff614f2f1ae00f78b93c37cb87463b5 guard-FAM-guardium_12.0_r120000140_1-Windows-Server-Windows-x86_x64.exe.signed
39d4c95dba6323663350755506493a1b guard-GUC-12.0_r120000140_1-x86_x64.gim
966244f633df8cb1e9dd1fca19574587 guard-GUC-guardium_12.0_r120000140_1-Windows-Server-Windows-x86_x64.exe.signed

Resources

Supported Platforms and Databases: 
https://www.ibm.com/support/pages/node/876538 

Supported platforms for files: 
https://www.ibm.com/support/pages/node/6245402 

IBM Security Guardium Data Protection documentation
https://www.ibm.com/docs/en/guardium

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
24 May 2024

UID

ibm17149193