Updating the SafeNet Luna Network HSM Appliance Software

The SafeNet Luna Network HSM appliance software consists of the LunaSH command-line shell and its underlying software components. Use the following procedure to install the SafeNet Luna Network HSM 10.2 appliance software update.

The update package includes an image of the latest HSM firmware, which you must install to take advantage of all the new features in this release. When you install the appliance software update, the latest firmware image is stored on the appliance file system but not installed. The system can only hold one firmware version in reserve at a time.

Firmware installation is a separate procedure (see Updating the SafeNet Luna HSM Firmware).

NOTE   The appliance software update cannot be rolled back directly. You can re-image to a predetermined configuration and then update to a desired appliance software version (see Re-Imaging the Appliance to Factory Baseline). The HSM firmware, however, can be rolled back to the previously-installed version (see Rolling Back the SafeNet Luna HSM Firmware).

To update the appliance software and firmware, you must transfer and apply a secure package file to the SafeNet Luna Network HSM. You require:

>SafeNet Luna Network HSM 10.2 appliance software update package file (<filename>.spkg)

>the secure package authentication code, provided in a text file accompanying the update package

To upgrade the SafeNet Luna Network HSM appliance software

1.Transfer the secure package update file to the SafeNet Luna Network HSM using pscp or scp.

pscp <path>/<filename>.spkg admin@<appliance_host/IP>:

2.Stop all client applications to the SafeNet Luna Network HSM appliance.

3.Using a serial or SSH connection, log in to the appliance as admin (see Logging In to LunaSH).

4.Log in as HSM SO (see Logging In as HSM Security Officer).

lunash:> hsm login

5.[Optional Step] Verify that the secure package file is present on the SafeNet Luna Network HSM.

lunash:> package listfile

6. [Optional Step] Verify the package file, specifying the authorization code you received from Thales Group.

lunash:> package verify <filename>.spkg -authcode <code_string>

7.Install the update on the SafeNet Luna Network HSM.

lunash:> package update <filename>.spkg -authcode <code_string>

The installation/update process takes approximately one and a half minutes. A series of messages shows the progress of the update. At the end of this process, a message “Software update completed!” appears.

8.Reboot the SafeNet Luna Network HSM appliance.

lunash:> sysconf appliance reboot

The latest firmware update package is now stored in reserve on the appliance, waiting to be installed. See Updating the SafeNet Luna HSM Firmware to install the firmware.