IBM Support

Release of Guardium Data Protection Windows GIM 12.xp102 r120204351

Release Notes


Abstract

This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 12.xp102 r120204351, including any new features or enhancements, resolved or known issues, or notices associated with the patch.

Content

Patch information
Product:IBM Guardium
Release version:Guardium 12.xp102 Windows Guardium Installation Manager (GIM)
Completion date:30 September 2026
 
 
Fix IDs
Guardium_12.x.p102_r120204351_GIM_Windows

 

 
Finding the patch
  1. Select the following options to download this patch on the IBM Fix Central website and click Continue.
    • Product selector: IBM Security Guardium
    • Installed Version: 12.0, 12.1, 12.2, or 12.x
    • Platform: Windows
  2. On the "Identify fixes" page, select Browse for fixes and click Continue.
  3. On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
 
Attention
 

Single-stream agent releases 
Most of the Linux-UNIX and Windows agents for Guardium Data Protection versions 12.0 and later are now released as single stream, cumulative updates. File names starting with "12.x" are now applicable to all current (12.0, 12.1, and 12.2) and future minor version releases within the Guardium 12.x family. The new naming convention follows a sequence, such as 12.xp100, 12.xp101, and so on. 

To accommodate the single-stream packaging change, ad-hoc appliance patches are required for any GIM-managed Linux-UNIX or Windows Agents customer environment before upgrading to the new single-stream agent release packages.  Visit Single-stream agent releases to identify the ad-hoc patch that aligns with your specific Guardium appliance version, and follow the prescribed upgrade sequence. 

Important: Do not upload Linux-UNIX Agents 12.xp101 or later, or Windows Agents 12.x.p100 or later to a GIM server that does not yet have this appliance patch installed because the bundle will not process correctly.

Note: Customers who already upgraded to Guardium 12.2.3 (GPU 12.0p230, see release notes) or later, or do not use GIM to install and manage agents do not need to apply these ad-hoc patches to use the new single-stream agent release packages.
 

SHA256 GIM client certificates

Guardium Data Protection versions 12.0p10 and later support both SHA256 and SHA128 GIM certificates. This has the following implications:

  • The default certificates could be either SHA256 or SHA128, depending on the GIM server certificate setup. Custom certificates that use SHA256 are more secure and are recommended for GIM connections.
  • If your existing GIM clients have the latest GIM bundle installed, you can switch the GIM server certificate between default SHA256 and SHA128 by using the CLI command if needed. GIM connectivity is not interrupted by this switch.
  • GIM only verifies bundles signed with SHA256 and requires installation of a transitional GIM bundle to support the GIM client upgrade from the SHA128 signed version to SHA256.
 
GIM client to connect with default certificates if custom certificates fail
In the event that a connection between GIM and the Guardium server cannot be established by using custom certificates, GIM will use default certificates.
 
 
Resolved issues
Patch
Issue keySummaryKnown issue (APAR)
12.xp101 r120203346 
See release notes for Windows GIM 12.xp101 r120203346
 
12.xp102 r120204351GRD-129934Removed the "Debug programs" user from the Guardium Services group during Windows S-TAP installations and upgrades to adhere to least-privilege security policies.DT498937
 GRD-133703Improved GIM client error handling to automatically clean up residual module directories following a failed installation, allowing subsequent retries to proceed normally.DT500272
 
 
Security updates

This patch remediates a security vulnerability. More information is available in the following IBM Security Bulletin published by the IBM Product Security Incident Response Team (PSIRT): https://www.ibm.com/support/pages/node/7291675 

PatchIssue keyCVE
12.xp102 r120204351GRD-131737CVE-2026-84891

 

Installers with MD5Sums
MD5SumFile name
e20620bff205748f2b75dc791a889c99GIM-Installer-12.x.p102_r120204351_1.zip
3345833599e65153a3e17e109899254cguard-GIM-12.x.p102_r120204351_1-x86_x64.gim
3c6a7ac78a34c2403f3bb02eb019b04eguard-GIM-guardium_12.x.p102_r120204351_1-Windows-Server-Windows-x86_x64.exe.signed
72ac954cb706b8c578348abec880e95aguard-GIM_transitional-12.x.p102_r120204351_1-x86_x64.gim
 
 
Related Guardium updates
  • Guardium Data Protection Windows CAS 12.xp102 r120204351 (see release notes)
  • Guardium Data Protection Windows FamMonitor 12.xp102 r120204351 (see release notes)
  • Guardium Data Protection Windows S-TAP 12.xp102 r120204351 (see release notes)

 

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0TAAS","label":"GIM"},{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"12.0.0;12.1.0;12.2.0"}]

Document Information

Modified date:
08 October 2026

UID

ibm17289340

Page Feedback