Updates and Upgrades

Thales releases periodic updates to the SafeNet Luna Network HSM appliance software and the HSM firmware, as well as updated versions of the SafeNet Luna HSM Client software. If you have recently purchased a new SafeNet Luna Network HSM and your organization requires FIPS certification, you can download and install a FIPS-validated version of the HSM firmware. You can download these updates as they become available from the Thales Customer Support Portal: https://supportportal.gemalto.com.

Depending on the model of SafeNet Luna Network HSM you selected at time of purchase, you may also be able to purchase upgrades to the HSM's capabilities, or increase the number of partitions you can create. These upgrades are provided through the Thales Licensing Portal (GLP).

The following chapter provides tested update paths and procedures for installing update packages, as well as a list of the version dependencies for certain features. It contains the following sections:

>Update Considerations

>Version Dependencies by Feature

>Updating the SafeNet Luna HSM Client

>Updating the SafeNet Luna Network HSM Appliance Software

>Updating the SafeNet Luna HSM Firmware

>Updating the SafeNet Luna Backup HSM Firmware

>Rolling Back the SafeNet Luna HSM Firmware

>Upgrading HSM Capabilities and Partition Licenses

Update Considerations

Before you install any of the updates, consider the following guidelines:

>Back up all important cryptographic material.

>Stop all client applications running cryptographic operations on the HSM.

>If you are using STC on the HSM Admin channel, disable it by running lunash:> hsm stc disable before you update the HSM firmware.

>Use an uninterruptible power supply (UPS) to power your HSM. There is a small chance that a power failure during an update could leave your HSM in an unrecoverable condition.