Home > |
---|
Update an existing secure package on the Network HSM appliance. All packages from Gemalto (formerly SafeNet) are signed and encrypted and come with an authcode that must be provided to decrypt and use the package. Use this command to update packages that can be seen when using the package listfile command. You can verify a package with the package verify command.
It is strongly recommended that your Network HSM appliance be connected to an Uninterruptable Power Supply (UPS) when you run this command. There is a small chance that a power failure during the update command could leave the Network HSM appliance in an unrecoverable condition.
If a version of this package is already installed, an error occurs, for example:
Command failed: RPM update for original filename (fwupK6_real-6.10.9-001.i386.rpm)
Note: You might need to log into the HSM before you run this command.
package update <filename> -authcode <authcode> [-des3 | -useevp] [-force]
Option | Shortcut |
Parameter |
Description |
---|---|---|---|
. | . | <filename> | |
-authcode | -a | <authcode> | Specifies the secure package authorization code provided by SafeNet with the secure package - the authorization code is checked during package installation to ensure that the package was encrypted and signed by SafeNet |
-des3 | -d | . | Use DES3 Cipher for backward compatibility with older secure package updates (cannot be used simultaneously with -useevp) |
-useevp | -u | . | Use the OpenSSL EVP (Digital EnVeloPe library) API to decrypt and validate the update package in appliance software without need for HSM SO login. If this option is not specified, the default action is to refer update verification to the HSM. (cannot be used simultaneously with -des3) |
-force | -f | . | Force the action - useful when scripting; this option causes the command to proceed without confirmation. |
lunash:>hsm login Please attend to the PED... Command Result : 0 (Success)
lunash:>package update lunasa_update-6.3.0.spkg -authcode pHLPtJ7/xJXS/FFK WARNING!! Appliance software upgrade is a one-way operation: you cannot downgrade the appliance software. If you are sure that you wish to proceed, type 'proceed', otherwise type 'quit'. >proceed Command succeeded: decrypt package Command succeeded: verify package certificate Command succeeded: verify package signature Preparing packages for installation... lunasa_update-6.3.0 Running update script BEGINNING UPDATE...... Updating to Luna SA Release 6.3.0 UNPACKING UPDATE FILES...... VERIFYING SOFTWARE PACKAGES...... 1...Passed INSTALLING SOFTWARE PACKAGES...... 1...Passed SOFTWARE UPDATE COMPLETED! Package installed successfully. Update Completed Command Result : 0 (Success)