IBM Support

Installing STAP with IBM InfoSphere Guardium Installation Manager (GIM)

Technote (FAQ)


Question

How to install STAP using IBM InfoSphere Guardium Installation Manager (GIM)

Answer


1 Invoking GIM

Installing modules to STAP hosts via GIM is a two-step process:

  1. Upload the module into the Central Manager or the relevant collector
  2. Distribute the modules to the various STAP hosts.

1.1 Upload the Module

This step loads the module into the Central Manager or the relevant collector. Download the required module from IBM Fix Central or your account in ftp.guardium.com.
  1. Navigate to Administration Console > Module Installation > Upload
  2. Click the Browse button to browse where your package (.gim file) is on disk
  3. Click Upload to upload your package
  4. Click on Import icon of uploaded package located under Import Uploaded modules section to load the package

1.2 Distributing the Modules to STAP hosts
  1. Navigate to Administration Console > Module Installation and select Setup By Client or Setup By Module
  2. Search for the client or the module depending upon what you selected in the previous step. In the search by module dialog, when you select the module and click on Next, you will be presented with a Client Configuration panel.

From the Client panel, the following actions are possible:
  • Configure/Install common parameters
  • Configure/Install module
  • Reset Clients - By clicking the "Reset Clients" button you can disassociate modules from selected clients and remove the client definition from the appliance database.
  • View installation state of this client - By clicking on the information icon you can open up the "Installation Status" panel and view the installation status of a client. This panel displays all modules on the client which are installed or scheduled for update or uninstall. From this panel, "Edit this module" icon can be used to configure parameters for each module individually
Resetting a client does NOT trigger module removal on the database server .


1.2.1 Configure/install common parameters
  1. Click on Common Parameters button from within the Clients panel to display the Module Parameters panel where common parameters for the selected clients can be configured/installed
  2. Select the clients in the Client Module Parameters section for which you would like to modify the parameters
  3. Modify any of the listed module parameters within the Client Module Parameters section
  4. Click Apply to Clients, after entering values for all required parameters on all selected clients, to save the configuration to the database. Before the save, a validation is performed to make sure all required fields have values or their values are in predefined range.
  5. After saving configurations, click Install/Update to schedule the module for installation on the selected clients. In addition, from the Module Parameters panel you may uninstall, cancel install/update, cancel uninstall, and revert current changes. Note that the schedule date and time corresponds to the date and time on the selected clients.
  6. Click the Back button to go back to the Clients panel.

1.2.2 Configure/Install Module

1. If configuring, installing, or updating:
a. by client
  1. Click the Next button to display the Common Modules panel where a list of all available common modules and bundles that can be installed on the selected clients.
  2. Select a module or bundle to configure/install for the selected clients. Selecting a module or bundle will show the status of that module or bundle in the Module Status section.
  3. Click Next after selecting a module or bundle from the list.
b. by module
  1. Click Next after selecting the clients from the list

2. Depending on the module or bundle selected, and possible dependencies, you will then see options based on the selection types:
  • Bundle: Clicking on the Next button for a bundle will take you to the Module Parameters panel that will display all the parameters for all modules of the bundle. Modify any of the listed module parameters within the Client Module Parameters section.
  • Module with dependencies: Clicking on the Next button for modules with no mandatory dependencies will take you to the Module Parameters panel that will display the module's parameters. Modify any of the listed module parameters within the Client Module Parameters section
  • Module with no mandatory dependency: Clicking on the Next button for a module with dependencies displays that module and all dependencies modules in the Dependent Modules screen. Click on Edit icon for any of the modules to configure its parameters for all selected clients; taking you to the Module Parameters panel that will display the module's parameters. Change any parameters there and click the Accept button to come back to the Dependent Modules screen.

3. Click Apply to Clients, after entering values for all required parameters on all selected clients, to save the configuration to the database. Before the save, a validation is performed to make sure all required fields have values or their values are in pre-defined range.

4. After Saving configurations, click Install/Update to schedule the module and its dependencies for installation on the selected clients. In addition, from the Dependent Module Parameters panel you may uninstall, cancel install/update, cancel uninstall, and revert current changes. Note that the schedule date and time corresponds to the date and time on the selected clients.

5. Click the Back button to go back to the Clients panel.


2 Special Consideration

If you are upgrading an STAP installation was originally installed without using GIM, special care must be taken, particularly if the KTAP in both the versions are the same. The conditions are:
  1. An upgrade using GIM of a non-GIM version 8 STAP
  2. The KTAP in both versions are the same.
  3. Upgrading the KTAP has failed because it is of the same version and build.
  4. Recovery process of GIM has halted.

In this situation, the system will have a non-working STAP, but with a loaded KTAP. The GUI will indicate that BUNDLE-STAP has failed; specifically:
  • BUNDLE-STAP,TEE,
  • STAP and
  • KTAP.

The other modules which were installed as part of the bundle will show “INSTALLED”. The GIM_EVENT entry will indicate, “ERROR CODE: ERR1”, to distinguish this failure from other KTAP failures.

If this occurs, a manual and possibly involved recovery and intervention by Technical Support is necessary.

To avoid problems, uninstall the non-GIM installed STAP first and install the new bundle STAP with GIM.

Related information

How to install Guardium Installation Manager (GIM)

Document information

More support for: IBM Security Guardium

Software version: 8.0, 8.0.1, 8.2, 9.0, 9.1

Operating system(s): AIX, HP-UX, Linux, Solaris, Windows

Reference #: 1569157

Modified date: 15 January 2015