Upgrading your Luna Cloud HSM Service Client
DPoD releases updates for the Luna Cloud HSM Service Client frequently. Regularly updating the Luna Cloud HSM Service Client provides you with access to the latest bug fixes, firmware updates, cryptographic utilities, enhanced performance, and improved service resilience.
We recommand that you upgrade your Luna Cloud HSM Service Client regularly, following any version or patch release. Check the CHANGELOG frequently to stay up-to-date on version releases or patch updates.
Updating your Luna Cloud HSM Service Client does not impact the Luna Cloud HSM Service itself or any cryptographic objects stored on the service. As a best practice, back up any existing clients before proceeding with the upgrade to preserve the client's configuration.
When upgrading be aware of the following:
- Upgrading one client does not disrupt other clients' access to a Luna Cloud HSM Service. If the client you are upgrading is the only client connected to a Luna Cloud HSM Service, you will lose access to that service until the upgrade is complete. As only one Windows client can connect to a particular service, Windows deployments require planning for the access disruption.
- Any manual updates you have made to the
crystoki-template.iniconfiguration file will not be copied following the client upgrade process. After the upgrade, you will need to re-apply any customization to the configuration file.
- Following the upgrade, any integrated applications may need to be restarted or reset before they can connect to the upgraded client.
- Re-initializing the Luna Cloud HSM Service will reset the Luna Cloud HSM Service and remove any cryptographic objects. Do NOT re-initialize the Luna Cloud HSM Service following the client upgrade. Log into
LunaCMusing the previously set passwords for the service.
If you would like to test the updated client before upgrading any production services, we recommend you sign up for an evaluation tenant account to gain access to the newest client for testing. Users can sign up for an evaluation tenant at the NA sign up page, or the EU sign up page. Refer to the Luna Cloud HSM Service Client Troubleshooting material for detailed information about common issues users may encounter with the Luna Cloud HSM Service Client.
To upgrade your Luna Cloud HSM Service Client to the latest version
Back up your existing Luna Cloud HSM Service Client as described in Backing up your Luna Cloud HSM Service.
Log in to your enterprise tenant as an application owner user. See Logging in for more information.
Navigate to the My Services tab and click the service name that you would like to upgrade the client for.
In the Create Service Client wizard, enter a Service Client Name (e.g.
service_upgraded_client.zip) and click Create Service Client.
A new Luna Cloud HSM Service Client generates and is provided for downloading and installing on the client machine.
The Luna Cloud HSM Service Client is a zip file that contains system information needed to connect your client machine to an existing Luna Cloud HSM Service available in the My Services table. See the section Luna Cloud HSM Service Client Contents for Luna Cloud HSM Service Client content details.
Transfer the Luna Cloud HSM Service Client to your machine. You can use SCP, PSCP, WinSCP, FTPS or other secure transfer tool to transfer the Luna Cloud HSM Service Client.
Unzip the Luna Cloud HSM Service Client.
cvclient-min.zip or the
cvclient-min.tar for your operating system. Extract the
cvclient-min.* within the
service_upgraded_client folder. Do not extract to a new
Windows: Uncompress the
cvclient-min.zip using an extraction tool.
tar xvf cvclient-min.tar
Set the environment variable:
Windows: Right click
setenv.cmd and select Run as Administrator, or execute
setenv.cmd from an administrator terminal.
Copy any manual updates or customization from your old Luna Cloud HSM Service Client
Chrystoki.conf (Linux) or
crystoki.ini (Windows) file to the new
crystoki.conf file. Do not remove anything from the new files
LunaCM. From the directory where you unzipped the
cvclient-min.zip file execute
lunacm. If the command executes with no errors, your connection is working correctly.
Do not re-initialize the Luna Cloud HSM Service when upgrading to the new client. Initializing the Luna Cloud HSM Service will reset the service and remove any cryptographic objects.