Updating the Luna Backup HSM (G5) Firmware

To update the firmware on a Luna Backup HSM (G5), use LunaCM on a client computer that is connected to the Luna Backup HSM. You require:

>Luna Backup HSM (G5) firmware update file (<filename>.fuf)

>the firmware update authentication code file(s) (<filename>.txt)

CAUTION!   Use an uninterruptible power supply (UPS) to power your HSM. There is a small chance that a power failure during an update could leave your HSM in an unrecoverable condition.

NOTE   To perform backup operations on HSM firmware 7.7.0 or newer (V0 or V1 partitions):

> Luna Backup HSM (G7) requires minimum firmware version 7.7.1

> Luna Backup HSM (G5) requires minimum firmware version 6.28.0

You can use a Luna Backup HSM with older firmware to restore objects to a V0 or V1 partition, but this is supported for purposes of getting your objects from the older partitions onto the newer V0 or V1 partitions only.

V0 and V1 partitions are considered more secure than partitions at earlier firmware versions - any attempt to restore from a higher-security status to lower-security status fails gracefully.

SMK backup for appliance is supported only with local connection.

To update the Luna Backup HSM (G5) firmware

1.Copy the firmware file (<filename>.fuf) and the authentication code file (<filename>.txt) to the Luna HSM Client root directory.

•Windows: C:\Program Files\SafeNet\LunaClient

•Linux: /usr/safenet/lunaclient/bin

•Solaris: /opt/safenet/lunaclient/bin

NOTE   On some Windows configurations, you might not have authority to copy or unzip files directly into C:\Program Files\.... If this is the case, put the files in a known location that you can reference in a LunaCM command.

2.Launch LunaCM.

3.If more than one HSM is installed, set the active slot to the Admin partition of the HSM you wish to update.

lunacm:> slot set -slot <slot_number>

4.Log in as HSM SO. Depending on the currently-installed firmware version, use one of the following two commands:

•lunacm:> role login -name so

•lunacm:> hsm login

5.Apply the new firmware update by specifying the update file and the authentication code file. If the files are not located in the Luna HSM Client root directory, specify the filepaths.

lunacm:> hsm updatefw -fuf <filename>.fuf -authcode <filename>.txt