Troubleshooting
This section provides some guidance for situations you might encounter.
Applying Upgrade on HSM Appliance
The LunaSH command sysconf license apply installs an upgrade on your HSM appliance. The following table describes potential messages you could see when you run this command.
| Message | Description |
|---|---|
Cannot find <filename>
|
You provide as a parameter to the sysconf license apply the filename that contains the license string you obtained from the ECP portal. This message means that the filename you provided cannot be found on the HSM appliance. Use my file list to see what files are available. |
Cannot find lservrc
|
You should not encounter this message. If you do, please contact Thales technical support for assistance. |
Invalid licensed feature
|
The license string is corrupted in the feature attribute. Confirm that you saved the license string without modification after activating the upgrade in the ECP portal. |
Invalid licensed feature version
|
The license string is corrupted in the feature version attribute. Confirm that you saved the license string without modification after activating the upgrade in the ECP portal. |
Invalid licensed HSM serial number
|
The license string is for an HSM with a serial number that is different from the serial number on this HSM appliance. |
<feature> not licensed for this appliance
|
The license string is for an HSM with a serial number that is different from the serial number on this HSM appliance. |
License is already applied
|
The license string matches an entitlement already applied on this HSM appliance. |
LUNA_RET_HSM_TAMPERED
|
The HSM is in a tampered state and must be cleared of the tampered state before the upgrade can be applied. |
Update Result : 12 (Error detecting HSM)
|
The HSM administrator is not logged in. |
License is unknown/not available (feature)
|
The HSM appliance software needs to be updated to support a newer feature. |
Upgrades not available for this model of HSM
|
Only 750 and 790 models of HSM support upgrades. |
Upgrade to <#> partitions not available for this model of HSM
|
Applying the upgrade would exceed the upper limit for the maximum number of partitions on the HSM. |
Unable to determine model of HSM
|
You should not encounter this message. If you do, please contact Thales technical support for assistance. |
Getting the HSM Fingerprint
The sysconf fingerprint license command displays the fingerprint for the HSM serial number. You can use this fingerprint – also referred to as a locking code – to correlate a license string to a specific HSM serial number. The command output shows the fingerprint only.
lunash:>sysconf fingerprint license Fingerprint for Use With Entitlement Management System ------------------------------------------------------- HSM serial #56725 : *1K9CMFJXJBVU6LC
This fingerprint must match the fingerprint in the license string:
16 LUNA_PARTITIONS_5PACK Ni LONG NORMAL STANDALONE ADD 1_KEYS INFINITE_KEYS 27 OCT 2016 21 19 NEVER NiL SLM_CODE CL_ND_LCK NiL *1K9CMFJXJBVU6LC0400 NiL NiL NiL 5_MINS 5_PACK 0 XjOZSSJSKlf39KMyH4qDLdXtwfJ08fFN8kNZ1qDFNiVaG6NF,bRpZH6ha09r17yRLyD1wlzpStLUH72nOHD4103x##AID=2c305d17-eec7-46cb-ad9f-b0ed752692ef
