IBM Support

Release of Guardium Data Protection Windows GIM 12.1.0.162

Release Notes


Abstract

This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 12.1.0.162, including any new features or enhancements, resolved or known issues, or notices associated with the patch.

Content

Patch information
Product: IBM Guardium
Release version: Guardium 12.1 Windows GIM
Completion date: 10 March 2025
Fix IDs
Guardium_12.1.0.162_GIM_Windows
Finding the patch
  1. Select the following options to download this patch on the IBM Fix Central website and click Continue.
    • Product selector: IBM Security Guardium
    • Installed Version: 12.0
    • Platform: Windows
  2. On the "Identify fixes" page, select Browse for fixes and click Continue.
  3. On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
Attention
SHA256 GIM client certificates
Guardium 12.1 supports both SHA256 and SHA128 GIM certificates. This has the following implications:
  • The default certificates could be either SHA256 or SHA128, depending on the GIM server certificate setup. Custom certificates that use SHA256 are more secure and are recommended for GIM connections.
  • If your existing GIM clients have the latest GIM bundle installed, you can switch the GIM server certificate between default SHA256 and SHA128 by using the CLI command if needed. GIM connectivity is not interrupted by this switch.
  • Guardium 12.1 GIM only verifies bundles signed with SHA256 and requires installation of a transitional GIM bundle to support the GIM client upgrade from the SHA128 signed version to 12.1.
GIM client to connect with default certificates if custom certificates fail
In the event that a connection between GIM and the Guardium server cannot be established by using custom certificates, GIM will use default certificates.
Deprecated support and functionality
Microsoft Windows Server 2012 and 2012 R2 
Windows Server 2012 and 2012 R2 reached end of support by Microsoft on 10 October 2023 and no longer receive security updates. For this reason, as of 31 March 2024, Guardium no longer maintains support for these operating systems. For more information, see IBM Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2.
Microsoft SQL Server 2012 
Guardium no longer supports Microsoft SQL Server 2012 as of 12 July 2022. For more information, see IBM Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012.
New support and functionality
Microsoft Windows Server 2025
Support added for Windows Server 2025.
New features and enhancements
Restricting traffic base on IE process name
S-TAP can now filter for Transmission Control Protocol (TCP) traffic directed to the database server processes specified in the inspection engines to reduce traffic noise.

The following parameters were added to control this new functionality.
WFP_PROCESS_RESOLVE_MODE
Description: this parameter dictates how S-TAP handles traffic from non-SQL Server sources on SQL Server ports.
Default value: 0
Possible values: 
0 - Traffic from non-SQL Server programs using SQL Server ports is sent to the S-TAP and the collector.
1 - Traffic from non-SQL Server programs using SQL Server ports is ignored.
2 - Traffic from non-SQL Server programs using SQL Server ports is passed if it reaches one of the two resolve limits, otherwise it is ignored.
WFP_PROCESS_RESOLVE_LIMIT
Description: This is the limit in KB of how much traffic is buffered per connection while attempting to resolve the server process name. If the limit is reached, traffic is either dropped or passed depending on the mode.
Default value: 2048
Value range: 1 - 20480
WFP_PROCESS_RESOLVE_TOTAL_LIMIT
Description: This is the limit in MB of how much traffic is buffered system-wide while attempting to resolve server process.

These new parameters can be modified by using Windows GIM 12.1.0.162 or later.
Resolved issues
Guardium Windows GIM 12.1.0.112
Patch
 Issue key Summary Known issue (APAR)
12.1.0.112
See release note for Windows GIM 12.1.0.112
12.1.0.162
GRD-87787
GIM will not delete parent folder when uninstalling
DT416895
GRD-89993
Removed a vulnerable Perl file subject to CVE-2023-7101 vulnerability.
Guardium Windows GUC 12.1.0.162
No changes were made to Guardium Windows GUC 12.1.0.162 since Guardium Windows GUC 12.1.0.112. If Guardium Windows GUC 12.1.0.112 is currently installed, upgrading to Guardium Windows GUC 12.1.0.162 is optional.
Installers with MD5Sums
MD5Sum File name
58cf01f4adae45813ab2ab3ce0da6b9c GIM-Installer-12.1_r120100162_1.zip
ae9de68d6e0268ca156abb3b4daa02f9 guard-GIM-12.1_r120100162_1-x86_x64.gim
347fd4e3acfa334d3f8b75a3c2ca2911 guard-GIM-guardium_12.1_r120100162_1-Windows-Server-Windows-x86_x64.exe.signed
68292fe54c8d9fe96a77b6f5c34929e5 guard-GIM_transitional-12.1_r120100162_1-x86_x64.gim
ee2fb88b59d01c5c3eeaf52ca0356446 guard-GUC-12.1_r120100112_1-x86_x64.gim
9ee6bb44f94a0b3cbabbc3d31fcfdde9 guard-GUC-guardium_12.1_r120100112_1-Windows-Server-Windows-x86_x64.exe.signed
Related Guardium updates
  • Guardium Data Protection Windows CAS 12.1.0.162 (see release note)
  • Guardium Data Protection Windows FAM for SP 12.1.0.162 (see release note)
  • Guardium Data Protection Windows FDEC for SP 12.1.0.162 (see release note)

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0TAAS","label":"GIM"},{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"12.1.0"}]

Document Information

Modified date:
16 May 2025

UID

ibm17183092

Page Feedback