Applying an Upgrade License on the HSM

The license string file you downloaded from the GLP (see Activating a License on the Thales Licensing Portal) is used to apply your HSM upgrade. The HSM Security Officer must complete this procedure.

NOTE Ensure that you have the license string file that is registered to the correct HSM serial number.

To apply an upgrade license on the HSM

1.Open a command prompt, navigate to the directory containing the license string file, and use scp/pscp to transfer it to an admin-level account on the SafeNet Luna Network HSM appliance (see SCP and PSCP).

•Windows: pscp [options] <license_file> admin@<host/IP>:

>pscp 532989_15_partitions admin@192.168.11.78:

admin@192.168.11.78's password:

532989_15_partitions      | 0 kB |   0.3 kB/s | ETA: 00:00:00 | 100%

•Linux/UNIX: scp [options] <license_file> admin@<host/IP>:

>scp 532989_15_partitions admin@192.168.11.78:

admin@192.168.11.78's password:

532989_15_partitions      | 0 kB |   0.3 kB/s | ETA: 00:00:00 | 100%

2.Connect to the appliance via SSH or a serial connection, and log in to LunaSH using the admin-level account that received the file (see Logging In to LunaSH).

3.Log in as HSM SO (see Logging In as HSM Security Officer).

lunash:>hsm login

4.[Optional] Confirm that the HSM fingerprint matches the one in the license string (sysconf fingerprint license). If this string does not match, the upgrade will not be applied.

lunash:>sysconf fingerprint license

lunash:>sysconf fingerprint license

Fingerprint for Use With Entitlement Management System

-------------------------------------------------------

HSM serial #532018 : *1RAJFAJ86KCKCPL

License string:

16 LUNA_PARTITIONS_5PACK 1.0 LONG NORMAL STANDALONE ADD 3_KEYS INFINITE_KEYS 14 AUG 2018 16 37 NEVER NiL SLM_CODE CL_ND_LCK NiL *1RAJFAJ86KCKCPL0400 NiL NiL NiL INFINITE_MINS NiL 0 :GE9X00:sVQWvrSsHei0favqw55tUmUqmzrSZWWGl0fzZ5WFY:A0IMaUI,28gfKGLuR3473OMxLhFHmdgmqqAr3WRTeLn4EH8JC0zKd7viMT3vhzNpQtgDJ0VbK3046,Acf1#

5.Apply the upgrade to the HSM (sysconf license apply).

lunash:>sysconf license apply -filename <license_file>

lunash:>sysconf license apply -filename 532989_15_partitions

WARNING !!  This command applies a licensed entitlement to the system.

If you are sure that you wish to proceed, type 'proceed', otherwise type 'quit'.

> proceed

Proceeding...

FwUpdate3 Application Version 2.5

SafeNet Firmware/Capability Update Utility

This is a NON-destructive capability update

Update Result : 0 (success)

Command Result : 0 (Success)

6.[Optional] Verify that the license has been applied (sysconf license list).

lunash:>sysconf license list

lunash:>sysconf license list

#     FEATURE                    VERSION   QUANTITY

===================================================

1     LUNA_PARTITIONS                1.0         10

2     LUNA_PARTITIONS                1.0         20

3     LUNA_PARTITIONS                1.0         15

Command Result : 0 (Success)

NOTE The QUANTITY column represents the total number of additional partitions associated with a specific license. Entry 3 represents the license in this example (three five-pack partition upgrades).