Welcome
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
These topics document methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
Auditing with IBM® Security Guardium® (UNIX, Linux)
You can audit user actions for your Informix® database server with IBM® Security Guardium® version 10.0 or later. IBM Security Guardium prevents leaks from databases, ensures the integrity of information, and automates compliance controls across heterogeneous environments.
ifxguard utility syntax
Use the ifxguard utility commands start, stop, and configure auditing.

HCL Informix® V15.0 documentation
Welcome to the documentation for HCL Informix® 15.0 and related client tools and products.
Product overview
HCL Informix® is a fast and scalable database server that manages traditional relational, object-relational, and dimensional databases. Its small footprint and self-managing capabilities are suited to embedded data-management solutions.
Installing
These topics describe how to install HCL Informix® database servers, client products, and DataBlade® modules.
Administering
In addition to administering the database server, you can tune performance, replicate data, and archive data.
Migrating and upgrading
You can upgrade to the 15.0 release of HCL Informix® or migrate from other database servers to Informix. Upgrading is an in-place migration method that uses your existing hardware and operating system software. Some changes to the Informix database server can affect upgrading from a previous release.
Client APIs and tools
You can use the HCL Informix® implementation of client APIs to develop applications for Informix database servers.
Embedding Informix®
When you embed HCL Informix®, you can use enterprise-class high-availability and high performance with embeddability features such as easy programmability, a small disk and memory footprint, and silent deployment.
Extending Informix®
Beyond standard relational database objects, HCL Informix® can be extended to handle specialized data types, access methods, routines, and other objects. Informix includes many built-in extensions that are fully integrated in the database server. Informix also provides DataBlade® modules, which are packages of extended database objects for a particular purpose and that are installed separately from the database server. Alternatively, you can create your own user-defined objects for Informix.
Data warehousing
In addition to designing and implementing Informix® dimensional databases, you can use tools to create data warehouse applications and optimize your data warehouse queries.
Designing databases
The first step in creating a relational database is to construct a data model, which is a precise, complete definition of the data you want to store. After you prepare your data model, you must implement it as a database and tables. To implement your data model, you first select a data type for each column and then you create a database and tables and populate the tables with data. You can also implement fragmentation strategies and control access to your data.
JSON compatibility
You can use the popular JSON-oriented query language created by MongoDB to interact with data stored in HCL Informix®.
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  These topics document methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Auditing with IBM® Security Guardium® (UNIX, Linux)
      You can audit user actions for your Informix® database server with IBM® Security Guardium® version 10.0 or later. IBM Security Guardium prevents leaks from databases, ensures the integrity of information, and automates compliance controls across heterogeneous environments.
      - ifxguard configuration file
        The ifxguard configuration file sets the properties of the ifxguard utility.
      - ifxguard utility syntax
        Use the ifxguard utility commands start, stop, and configure auditing.
      - IFXGUARD configuration parameter
        The IFXGUARD configuration parameter enables auditing with IBM® Security Guardium® and sets the actions of the database server if the IBM Security Guardium server does not respond in the timeout period.
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file
SQL programming
You can use the HCL Informix® implementation of the SQL language to develop applications for Informix database servers.
Troubleshooting HCL Informix®
Several troubleshooting techniques, tools, and resources are available for resolving problems that you encounter in your HCL Informix® database server environment.

ifxguard utility syntax

Use the ifxguard utility commands start, stop, and configure auditing.

Syntax

Table 1. ifxguard utility syntax elements
Element	Purpose
-c `configuration_file`	Specifies the path and name of the ifxguard configuration file. Default is $INFORMIXDIR/etc/ifxguard.$INFORMIXSERVER.
-k `agent_name`	Stops the specified ifxguard agent.
-l `log_file_path`	Specifies the full path and file name for the ifxguard log file.
-p `exit_file`	Starts the ifxguard agent and generates a configuration file with the name $INFORMIXSERVER_guard. Specifies the full path and file name of the Informix® EXIT file for IBM® Security Guardium®. Default is $HOME/lib/libguard_informix_exit_64.so.
-r `agent_name`	Reloads the ifxguard configuration file for the specified ifxguard agent while the agent is running. Changes to only the debug level and the log file are recognized during reloading.
-w `workers`	Specifies the number of threads for the ifxguard agent.

Example: Start the ifxguard agent with the default configuration file

The following command starts the ifxguard agent with the configuration file in the default location:

ifxguard

Example: Start the ifxguard agent and generate a configuration file

The following command starts the ifxguard agent and generates a configuration file that specifies a log file and 6 worker threads:

ifxguard -p $HOME/lib/libguard_informix_exit_64.so -l /tmp/logfile.txt -w 6

Example: Stop the ifxguard agent

The following command stops the ifxguard agent that is named ifxg_ol_informix1210_1:

ifxguard -k ifxg_ol_informix1210_1

Example: Change the configuration of the ifxguard agent

The following command reloads the edited configuration file for the ifxguard agent that is named ifxg_ol_informix1210_1:

ifxguard -r ifxg_ol_informix1210_1