Home >

LunaSH Command Reference Guide > LunaSH Commands > package > package update

package update

Update an existing secure package on the Network HSM appliance. All packages from Gemalto (formerly SafeNet) are signed and encrypted and come with an authcode that must be provided to decrypt and use the package. Use this command to update packages that can be seen when using the package listfile command. You can verify a package with the package verify command.

It is strongly recommended that your Network HSM appliance be connected to an Uninterruptable Power Supply (UPS) when you run this command. There is a small chance that a power failure during the update command could leave the Network HSM appliance  in an unrecoverable condition.

If a version of this package is already installed, an error occurs, for example:

Command failed: RPM update for original filename (fwupK6_real-6.10.9-001.i386.rpm)

Note:  You might need to log into the HSM before you run this command.  

Syntax

package update <filename> -authcode <authcode> [-des3 | -useevp] [-force]

Option Shortcut

Parameter

Description
. . <filename>  
-authcode -a <authcode> Specifies the secure package authorization code provided by SafeNet with the secure package - the authorization code is checked during package installation to ensure that the package was encrypted and signed by SafeNet  
-des3 -d . Use DES3 Cipher for backward compatibility with older secure package updates
(cannot be used simultaneously with -useevp)  
-useevp -u . Use the OpenSSL EVP (Digital EnVeloPe library) API to decrypt and validate the update package in appliance software without need for HSM SO login. If this option is not specified, the default action is to refer update verification to the HSM.
(cannot be used simultaneously with -des3)  
-force   -f . Force the action - useful when scripting; this option causes the command to proceed without confirmation.

Example

lunash:>hsm login
Please attend to the PED...

Command Result : 0 (Success)

lunash:>package update lunasa_update-6.3.0.spkg -authcode pHLPtJ7/xJXS/FFK

WARNING!!  Appliance software upgrade is a one-way operation: you 
cannot downgrade the appliance software. 
If you are sure that you wish to proceed, type 'proceed', otherwise type 'quit'.  >proceed

Command succeeded:  decrypt package
Command succeeded:  verify package certificate
Command succeeded:  verify package signature
Preparing packages for installation...
lunasa_update-6.3.0 
Running update script

BEGINNING UPDATE......
 Updating to Luna SA Release 6.3.0 
UNPACKING UPDATE FILES......
VERIFYING SOFTWARE PACKAGES......
1...Passed

INSTALLING SOFTWARE PACKAGES......
1...Passed

SOFTWARE UPDATE COMPLETED!
Package installed successfully.
Update Completed

Command Result : 0 (Success)