Release Notes
Abstract
This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 12.2.1.205, including any new features or enhancements, resolved or known issues, or notices associated with the patch.
Content
| Product: | IBM Guardium |
|---|---|
| Release version: | Guardium 12.2 Windows Guardium Installation Manager (GIM) |
| Completion date: | 19 December 2025 |
Guardium_12.2.1.205_GIM_Windows |
- Select the following options to download this patch on the IBM Fix Central website and click Continue.
- Product selector: IBM Security Guardium
- Installed Version: 12.2
- Platform: Windows
- On the "Identify fixes" page, select Browse for fixes and click Continue.
- On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
- The default certificates could be either SHA256 or SHA128, depending on the GIM server certificate setup. Custom certificates that use SHA256 are more secure and are recommended for GIM connections.
- If your existing GIM clients have the latest GIM bundle installed, you can switch the GIM server certificate between default SHA256 and SHA128 by using the CLI command if needed. GIM connectivity is not interrupted by this switch.
- Guardium 12.2.1 GIM only verifies bundles signed with SHA256 and requires installation of a transitional GIM bundle to support the GIM client upgrade from the SHA128 signed version to 12.2.1.
Single-stream agent releases
Starting with Guardium Data Protection 12.2.1.0, most of the Linux-UNIX and Windows agents for Guardium Data Protection versions 12.0 and later are now released in a "single stream". Previously, each Guardium 12.x release (12.0, 12.1, and 12.2) had its own separate agent installers and patch packages. With the move to single-stream packaging, the agent binaries are unified into one continuous release line, so the same installation and upgrade package applies across multiple Guardium 12.x versions. This simplifies maintenance, reduces version divergence, and ensures consistent feature and fix availability across all supported 12.x environments.
File names starting with 12.x are now applicable to all current Guardium 12.x versions (12.0, 12.1, and 12.2), and future releases within the Guardium 12.x family. The single-stream packaging currently applies to the following agents:
- Guardium Configuration Auditing System (CAS)
- Guardium File Activity Monitor (FAM) for Windows
- Guardium Installation Manager (GIM)
- Guardium Software TAP (S-TAP)
With this change, customers no longer need to locate version-specific agent packages for each 12.x release. Installing the latest 12.x agent package will be supported across all 12.x collector and aggregator versions that meet the documented compatibility requirements.
Note: The single-stream packaging does not currently apply to External S-TAP agents.
Issue key | Description |
|---|---|
GRD-74281 | GIM transitional bundles (SHA1) cannot be uploaded to Guardium 12.2 when FIPS mode is on. Workaround: Turn off FIPS mode to upload SHA 1 GIM bundles. |
GRD-103379 | When upgrading a GIM client from a major version that supports GIM bundle changes to a major version that does not support GIM bundle changes (versions earlier than 12.2), the GIM Client Status report may display outdated values in the Active Certificate-related columns. Workaround: To avoid seeing outdated certificate values in the report, you can perform a GIM connection reset. This action clears the stale data and refreshes the client status. |
| GRD-109036 | If your GIM agent is not connected after you upgrade your Guardium appliance to 12.2 (and assuming GIM service port 8446 is open), restart tomcat manually from the command-line interface with the restart gui command. |
Patch | Issue key | Summary | Known issue (APAR) |
|---|---|---|---|
12.2.0.158 | |||
12.2.1.205 | GRD-109472 | Exposed FAM_PROTECT_PRIVILEGED parameter through Guardium Installation Manager (GIM) | DT454289 |
GRD-110688 | Removed vulnerable OpenSSL binaries from GIM installation subject to CVE-2022-1292, CVE-2022-2068, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-4807, CVE-2023-5363, CVE-2024-4741, CVE-2024-5535, and CVE-2024-6119. | DT454221 | |
| GRD-112239 | Removed vulnerable OpenSSL ssleay32.dll binary from S-TAP installation | DT454210 | |
| GRD-113649 | Upgraded OpenSSL to version 3.5.4 to remove vulnerability subject to CVE-2025-9230 | DT457505 |
| MD5Sum | File name |
|---|---|
| 56ddbd5fbad870f5f40e86024938bacc | GIM-Installer-12.2_r120201205_1.zip |
| addb02986935426963796c06ea6f4a3e | guard-GIM-12.2_r120201205_1-x86_x64.gim |
| 0fab581bcde1f58338eb12a63e5fc4cd | guard-GIM-guardium_12.2_r120201205_1-Windows-Server-Windows-x86_x64.exe.signed |
| c16232d03aab3de64d59e101677069f1 | guard-GIM_transitional-12.2_r120201205_1-x86_x64.gim |
| 38f8a2c96b060354605ab42a7bc834f2 | guard-GUC-12.2_r120201205_1-x86_x64.gim |
| cc8653fcbffe9b6fcadfc612dda0ef98 | guard-GUC-guardium_12.2_r120201205_1-Windows-Server-Windows-x86_x64.exe.signed |
- Guardium Data Protection 12.2.1.0 (see release note)
- Guardium Data Protection Windows CAS 12.2.1.205 (see release note)
- Guardium Data Protection Windows FamMonitor 12.2.1.205 (see release note)
- Guardium Data Protection Windows S-TAP 12.2.1.205 (see release note)
Was this topic helpful?
Document Information
Modified date:
19 December 2025
UID
ibm17254671