Home > |
---|
Update Token firmware, using a firmware update package available on
the SafeNet appliance.
The package must be transferred to the SafeNet appliance by scp (individually or as a component of a system update), and you
must login to the PKI token as Token Administrator or SO before the 'token pki update firmware' command is run.
The command requires no package name.
The term "token" in this case refers to removable token-format HSMs connected via SafeNet DOCK 2 and USB (legacy equipment), or to a SafeNet USB HSM, connected via USB.
Before you can use this command, you must:
•acquire the secure package update file from SafeNet and send the file to the SafeNet Network HSM (using scp or pscp)
Note: Use of older PuTTY versions, and related tools, can result in the appliance refusing to accept a connection. This can happen if a security update imposes restrictions on connections with older versions. To ensure compatibility, always use the versions of executable files included with the current client installer.
•open the file on the SafeNet Network HSM with the lunash command package update <filename> -authcode <authcode>
A capability update or a firmware update is meant to be applied just one time to an HSM. If you attempt to re-apply a capability update to an HSM that already has the capability installed, the system throws an error like " C0000002 : RC_GENERAL_ERROR ". A similar result occurs if you attempt to install a particular firmware update more than once on one HSM. This is expected behavior.
token pki update firmware -serial <serialnum> [-force]
Parameter | Shortcut | Description |
---|---|---|
-force | -f |
Force the action without prompting. |
-serial | -s | Specifies the token serial number. |
lunash:> token pki update firmware -serial 475289 CAUTION: This command updates the Token firmware. This process cannot be reversed. Type 'proceed' to continue, or 'quit' to quit now. > proceed Partition #: 14 Name: Cryptoki User Status: Passed Update Result : 0 (Success) Command Result : 0 (Success)