IBM Support

Release of Guardium Data Protection upgrade patch 11.0p12002

Release Notes


Abstract

This technical note provides guidance for installing IBM Guardium Data Protection upgrade patch 11.0p12002 to upgrade Guardium appliances from version 11.5 to version 12.2 (GPU 12.0p200), including any new features or enhancements, resolved or known issues, or notices associated with the patch.

Content

Upgrade to Guardium 12.2 (GPU 12.0p200) 

Before you upgrade, confirm that your appliance meets the minimum requirements. Upgrade your firmware to the latest versions provided by your vendor. If you use a Guardium appliance, check the IBM Fix Central website for the latest firmware. 
 
With this patch, you can upgrade to Guardium 12.2 (GPU 12.0p200, see release notes) from Guardium systems that are running on version 11.5 with appliance bundle patch 11.0p580 or later. The best approach for upgrading Guardium depends on the version you are upgrading from, the hardware of your system, and any special partitioning requirements you might have. See Identifying the correct upgrade path to review upgrade scenarios and identify the correct upgrade path for your Guardium systems. Review the latest version of these release notes just before you install. 
 
Note: The Guardium system will restart during the upgrade process for all of the patch installations, so schedule the upgrades in batches during low database traffic times to minimize audit gaps. Do not reboot the appliance while the patch installations are in progress. Contact IBM Support if there is an issue with patch installation.

 
Prerequisites
  • Guardium Data Protection appliance bundle patch 11.0p580 (see release note) or later.
  • The latest Guardium Data Protection pre-upgrade health check patch 11.0p9998 (see release notes)
 
Patch information
  • Patch file name: SqlGuard-11.0p12002_Upgrade_to_Version_12.2_Aug_2026.tgz.enc.sig
  • MD5 checksum: f1923e1a825db51912f2ff896cb7eab5
 

Finding the patch

  1. Select the following options to download this patch on the IBM Fix Central website and click Continue.
    • Product selector: IBM Security Guardium
    • Installed Version: 11.5
    • Platform: All
  2. On the "Identify fixes" page, select Browse for fixes and click Continue.
  3. On the "Select fixes" page, select GPU/Major Upgrade. Then, enter the patch information in the Filter fix details field to locate the patch.
 
For information about Guardium patch types and naming conventions, see the Understanding Guardium patch types and patch names support document.
 
 
Attention
 

Guardium Database Protection Service file (for Vulnerability Assessment only)
The latest quarterly Guardium Database Protection Service (DPS) update for version 12.x from Fix Central must be applied after you upgrade to Guardium 12.2 (GPU 12.0p200) from version 11.5. Be sure to also check Fix Central for the latest Rapid Response DPS update and apply it after uploading the latest quarterly update.

Guardium Installation Manager
If your Guardium Installation Manger (GIM) agent is not connected after you upgrade your Guardium appliance to GPU 12.0p200 (and assuming GIM service port 8446 is open), restart tomcat manually from the command-line interface with the restart gui command. 

Port requirements
Guardium administrators should close port TCP 8586 if they are not using Guardium Data Security Center.

Storage support for upgrade 
Amazon Simple Storage Service (S3) and Tivoli Storage Manager are supported as protocols for upgrade workflows. However, upgrade using S3 through the Identity and Access Management (IAM) instance profiles option is not supported. IBM COS, NFS, and EMC protocols are not supported for upgrading. If the password is kept externally, such as in CyberArk Password Vault, HashiCorp Vault, or AWS Secrets Manager, then the upgrade is not supported.

Transport Layer Security (TLS)
While Guardium supports TLS 1.3, not all add-ons and features currently provide TLS 1.3 support. Until you know that every part of your Guardium system supports TLS 1.3, do not disable TLS 1.2.


Known limitations and workarounds

Issue keySummary
--
Review the Guardium Data Protection 12.2 (GPU 12.0p200) release notes for known limitations. They also apply to upgrade patch 11.0p12002.
GRD-124853
GRD-125487

The following CLI commands do not retain their values when upgrading from version 11.5 (with appliance bundle patch 11.0p580 or later) to version 12.2 (GPU 12.0p200) by using upgrade patch 11.0p12002. 

  • start guardium_insights 
  • store aggregator static_data 
  • store log classifier level 
  • store pdf-config multilanguage_support 
  • store remotelog max_messsage_size 
  • store system classifier profile 
  • store system scp-ssh-key-mode 
  • store snif-thread-number new 
  • store system sshd-max-connection 
  • store timeout db_connection 
  • support logrotate message 
  • support store tcpdump on 


Workaround: Rerun the commands after the upgrade is finished to set the values again.

 

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.5.0"}]

Document Information

Modified date:
15 September 2026

UID

ibm17271393

Page Feedback