Applying an Upgrade License on the HSM

The license string file you downloaded from the portal (see Activating a License on the Thales Licensing Portal) is used to apply your HSM upgrade. The HSM Security Officer must complete this procedure.

Prerequisites

>Ensure that you have the license string file that is registered to the correct HSM serial number.

>If you are installing partition upgrades, ensure that you have space available on the HSM. By default, partitions are created at a size that will utilize the entire HSM space based on the number of partition licenses at the time. If your existing partitions use all available space on the HSM, the new license application may fail with an error (LUNA_RET_RM_CONFIG_CHANGE_FAILS_DEPENDENCIES). To prevent this, reclaim space on the HSM by resizing the existing partitions (see Customizing Partition Sizes) before you apply the upgrade license.

To apply an upgrade license on the HSM

1.Open a command prompt, navigate to the directory containing the license string file, and use pscp/scp to transfer it to an admin-level account on the Luna Network HSM 7 appliance.

pscp [options] <license_file> admin@<host/IP>:

2.Connect to the appliance via SSH or a serial connection, and log in to LunaSH using the admin-level account that received the file (see Logging In to LunaSH).

3.Log in as HSM SO (see Logging In as HSM Security Officer).

lunash:> hsm login

4.[Optional] Confirm that the HSM fingerprint matches the one in the license string. If this string does not match, the upgrade will not be applied.

lunash:> sysconf fingerprint license

Fingerprint for Use With Entitlement Management System
-------------------------------------------------------
HSM serial #123456 : *1DPEB4BL87NFNNX0400

License string:

16 LUNA_PARTITIONS_5PACK 1.0 LONG NORMAL STANDALONE ADD 1_KEYS INFINITE_KEYS 27 APR 2021
19 48 NEVER NiL SLM_CODE CL_ND_LCK NiL *1DPEB4BL87NFNNX0400 NiL NiL NiL INFINITE_MINS NiL 0 59Kdd5R,Wd:uefzRzcTJV1ntW5:boCIzNstRvSkP4cVD4jvU8V9MvVhIhZ7nDmu83Hl9:HSNVV0ZTUfXbf56By30
pXpcpzdVMpi7:D92E4BBVOpqJRSqa41ProwvTABoJE3f##AID=bf1ac487-dc06-4709-a66e-3de4821d4fd4

5.Apply the upgrade to the HSM.

lunash:> sysconf license apply -filename <license_file>

6.[Optional] Verify that the license has been applied.

lunash:> sysconf license list

NOTE   The QUANTITY column represents the total number of additional partitions associated with a specific license. This column does not apply to other types of license upgrades.