Luna Appliance Software 7.3.3

Luna Appliance Software 7.3.3 was released in September 2019.

>Download Luna Appliance Software 7.3.3 (includes Luna HSM Firmware 7.3.3 update)

New Features and Enhancements

Luna Network HSM 7 7.3.3 includes the following new features and enhancements:

Change in Routing Table

The Routing Table is displayed by entering lunash:> network route show, or at the bottom of the output for lunash:> network show.

Only one default gateway is now allowed.

The example below shows a default gateway on the eth0 interface.

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.10.2.10     0.0.0.0         UG    100     0       0 eth0

Add/Delete default gateway

You can now add or delete a default gateway on a network interface (eth0, eth1, eth2, eth3, bond0, bond1) only when the provided gateway value is 0.0.0.0. Use the following commands to add/delete a default gateway:

To add a default gateway to the eth0 interface

lunash:> network route add network 1.2.3.4 -device eth0 -gateway 0.0.0.0

To delete a default gateway from the eth0 interface

lunash:> network route delete network 1.2.3.4 -device eth0 -gateway 0.0.0.0

Bonding Interface MAC Always the Same

Prior to this release, bond0 and bond1 interfaces MAC address were randomly changing after rebooting the SafeNet Luna Network HSM.

bond0 MAC address will always be eth0 MAC address.

bond1 MAC address will always be eth2 MAC address.

Valid Update Paths

You can update the Luna Appliance Software to version 7.3.3 from the following previous versions:

>7.2.0, 7.3.0, 7.3.1, 7.3.2

Advisory Notes

This section highlights important issues you should be aware of before deploying Luna Appliance Software 7.3.3.

Install Luna Network HSM 7 Reboot Patch Before Updating to Luna Appliance Software 7.3.3

Thales recommends installing the Luna Network HSM 7 Reboot Patch before upgrading to Luna Appliance Software 7.3.3.

Re-apply the Luna Network HSM 7 Reboot Patch to Older Luna Appliance Software Versions

The Luna Network HSM 7 Reboot Patch is recommended for all Luna Network HSM 7s. Appliances currently shipped from the factory have this patch already installed, but if you use Luna Appliance Software 7.4.0 or older in your production environment, you must re-apply the patch after performing one or both of the following actions:

>Re-imaging the appliance to Luna Appliance Software 7.2.0 and Luna HSM Firmware 7.0.3

>Updating to Luna Appliance Software 7.4.0 or older

Luna Appliance Software 7.3.x Does Not Support 10G Optical Ethernet

The Luna Network HSM 7 with 10G optical ethernet capability is not supported by Luna Appliance Software 7.3.x. If you have a 10G-ready appliance, update appliance software to Luna Appliance Software 7.4.0 or newer only.

CAUTION!   Do not update the 10G appliance to Luna Appliance Software 7.3.x.

The port mapping will revert to the 1G configuration and you will lose 10G support. The appliance might require RMA to fix the port mapping.

NTP Server May Take Slightly Longer to Connect/Disconnect After Updating to Luna Appliance Software 7.3.x or newer

If you are using NTP, then after you update to Luna Appliance Software 7.3.x you might find that the Luna Network HSM 7 appliance takes longer to synchronize with the NTP server.

To reduce the synchronization time, specify the -iburst option when adding an NTP server:

lunash:> sysconf ntp addserver <hostname/IP> -iburst

This causes the server to more rapidly synchronize when first connecting/reconnecting.