|
Home > |
|---|
Update Backup Token Capability, using a capability update package that you have acquired from SafeNet and transferred via scp to the Luna appliance. Before you can use this command, you must:
•acquire the secure package update file from SafeNet and send the file to the Luna SA (using scp or pscp)
•open the file on the Luna SA with the lunash command package update <filename> -authcode <authcode>
Note: WHEN to USE lunash "token backup" commands, or use "vtl backup" commands?
Luna Shell (lunash:>) token backup commands operate a Luna Backup HSM attached directly to Luna SA via USB, and are not intended for use with remotely connected backup devices.
You might have a and a locally connected serial terminal and be walking them from Luna SA to Luna SA in your server room to perform backups. Or you might be administering remotely via SSH and lunash:> commands, while a technician in your server center carries the backup HSM from one Luna SA to the next. In either case, these "token backup" commands are the method to use.The important distinction is where the backup HSM is physically connected - from the Luna SA perspective, those are both local backup operations to a Backup HSM that is locally connected to the appliance.
VTL backup commands operate a Luna Backup HSM connected to a computer, and located distantly from your primary Luna SA appliance. The VTL backup commands are not for use with a Luna Backup HSM that is connected directly to your Luna SA appliance.
For true, hands-off, lights-out operation of your Luna appliances, use a Luna Remote Backup HSM located in your , connected to a computer acting as a . This means the computer and Backup HSM are located near you and remote/distant from your Luna SA appliance(s). For that application, use the backup commands in the VTL utility supplied with the Luna SA - the appliance token backup commands (previous paragraph) are not designed to work for Remote Backup.
A capability update or a firmware update is meant to be applied just one time to an HSM. If you attempt to re-apply a capability update to an HSM that already has the capability installed, the system throws an error like " C0000002 : RC_GENERAL_ERROR ". A similar result occurs if you attempt to install a particular firmware update more than once on one HSM. This is expected behavior.
token backup update capability -serial <serialnum> -capability <capabilityname> [-force]
| Parameter | Shortcut | Description |
|---|---|---|
| -capability | -c | Specifies the capability name. |
| -force | -f | Force the action without prompting. |
| -serial | -s | Specifies the token serial number. |
lunash:>token backup update capability -serial 667788 -capability newcapability
CAUTION: This command updates the Token Capability.
This process cannot be reversed.
Type 'proceed' to continue, or 'quit'
to quit now.
> proceed
This is a NON-destructive capability update
Update Result :0 (Capability newcapability added)
Command Result : 0 (Success)