Front-panel LCD Display

The LCD on front panel of the Luna Network HSM 7 provides basic configuration and status information for the appliance. The LCD is split horizontally into three sections as follows:

Figure 1: The LCD display

Top

Displays the current IP address configuration of the Ethernet ports on the appliance.

If a port is configured, its IP address is displayed. If the port is not configured, the string "not configured" is displayed. This section automatically cycles between ports eth0 and eth1, and ports eth2 and eth3.

The icons indicate the connection status of the port, as follows:

An Ethernet cable is connected to the port.

An Ethernet cable is not connected to the port.

Middle

Automatically cycles between displaying the following information:

>Software (SW) and firmware (FW) versions currently installed on the appliance

>Appliance host name

>HSM label and HSM serial number
Bottom

Displays the current appliance state and status codes, as detailed in Appliance State and Status Codes.

The icon shading indicates the appliance state, as follows:

 ISO  The appliance state is normal, indicated by dark text on a light background.

 IST   OOS   OFL   OFT  The appliance state is not normal, indicated by light text on a dark background.

Appliance State and Status Codes

The bottom section of the LCD displays the current appliance state and related status codes. The state can be one of the following.

 ISO 

In Service Operational. The appliance is operating normally.

All services are running and the appliance is providing encryption/signing services as expected.
 IST 

In Service Trouble. The appliance is operational, but is experiencing a fault condition.

The required services are operational and the appliance is able to provide encryption/signing services, but some services, such as SSH, are not running.
 OOS 

Out of Service. The appliance is not operational.

The appliance is online but one or more required services are not operational. The appliance is not providing service. (* See, in particular, ALM codes that result in LCD Status OOS 30 displayed, at the bottom of this page.)

 OFL 

Offline. There is no network connectivity to the appliance.

In this service state the appliance is not currently connected to the network and cannot provide service.

NOTE   Prior to Luna Appliance Software 7.8.3, this code is incorrectly displayed as  OFT  (see resolved issue LUNA-28763).

Status Codes

Each state is associated with one or more status codes, which provide additional information about the status of the appliance. For example, if there are no faults detected, the display indicates that the appliance is in service (ISO), with status code 0, so the display reads "ISO 0."

The codes are listed in the following table. You can also use lunash:> status sysstat code all to display a list of the possible status codes.

If one or more faults have been detected, the display shows the most severe status code until that fault has been corrected, then it displays the next most severe status code, until all errors have been corrected.

NOTE   Not all faults are serious. Some might merely indicate that an available service is not running because you chose not to run it.

The displayed messages update following a scan of selected system conditions, approximately every 15 seconds. If you have fixed a fault that caused an error, the display should clear the error indication at the next update. If the display continues to show the error message, then the fault may have re-occurred and you should investigate.

The statuses in the table, below, are displayed on the appliance front panel and are recorded in system logs that you can collect and parse remotely.

State

Status

Description

 ISO 

0

In Service Operational. No trouble.

60

In Service Operational. The eth0 interface is offline.

Use lunash:> network show and lunash:> service statusnetwork to display more information about the status of the network interfaces.

61

In Service Operational. The eth1 interface is offline.

Use lunash:> network show and lunash:> service statusnetwork to display more information about the status of the network interfaces.
62

In Service Operational. The eth2 interface is offline.

Use lunash:> network show and lunash:> service statusnetwork to display more information about the status of the network interfaces.
63

In Service Operational. The eth3 interface is offline.

Use lunash:> network show and lunash:> service statusnetwork to display more information about the status of the network interfaces.
80

In Service Operational. The STC service is not running.

Use lunash:> service statusstc to display more information about the status of the STC service.
95

In Service Operational. The webserver service is not running. The REST API is not available.

Use lunash:> service statuswebserver to display more information about the status of the webserver service.

100

In Service Operational. The SNMP service is not running.

Use lunash:> service statussnmp to display more information about the status of the SNMP subsystem.
 OOS 

20

Out of Service. The NTLS service is not running.

Use lunash:> service statusntls to display more information about the status of the NTLS service.

25

Out of Service. The NTLS service is not bound to an Ethernet device.

Use lunash:> service statusntls to display more information about the status of the NTLS service, and lunash:> syslog tail to view the system logs to help troubleshoot the issue.

30

Out of Service. The HSM service has experienced one or more errors or critical events.

Use lunash:> hsm information show and lunash:> syslog tail to help troubleshoot the issue.

 OFL 

50

Offline. None of the Ethernet interfaces are connected to the network.

Use lunash:> network show to display more information about the status of the network, and lunash:> syslog tail to view the system logs to help troubleshoot the issue.

NOTE   Prior to Luna Appliance Software 7.8.3, this code is incorrectly displayed as  OFT  (see resolved issue LUNA-28763).

 IST 

70

In Service Trouble. The syslog service is not running.

Use lunash:> service statussyslog to display more information about the status of the syslog service, and lunash:> syslog tail to view the system logs to help troubleshoot the issue.

90

In Service Trouble. The SSH service is not running.

Use lunash:> service statusssh to display more information about the status of the syslog service, and lunash:> syslog tail to view the system logs to help troubleshoot the issue.

110

In Service Trouble. Hard disk utilization is too high.

Use lunash:> syslog tarlogs to create a tar archive of the logs and then use pscp to transfer the log archive from the appliance to a remote computer for archiving.

NOTE   The LCD initially displays the Thales logo when it (re)starts, and then displays the status information for the appliance. If you find that the LCD is failing to update, you may need to restart it using the service commands for the sysstat service (service start sysstat, service stop sysstat or service restart sysstat). You can also disconnect and reconnect the power from the appliance to restart the LCD.

Appliance reports out-of-service (OOS) code 30

Anything that halts the firmware (such as ALM_2004, ALM_2009, ALM_2026) results in an out-of-service code 30. Other critical events that halt the firmware include:

>failed self-test

>failure in the random number generator

>failure in integrity of the bootloader

>failure in integrity of the firmware

>failure in integrity of the HSM memory