Upgrade Client
Tip
Luna Cloud HSM Services provisioned through the Thales Data Protection on Demand marketplace user interfaces refer to a service client. Luna Cloud HSM Services provisioned through external marketplaces user interfaces refer to a partition client. The documentation refers to these components as the client.
DPoD releases updates for the client frequently. Regularly updating the client provides you with access to the latest bug fixes, firmware updates, cryptographic utilities, enhanced performance, and improved service resilience.
We recommend that you upgrade your client regularly, following any version or patch release. Check the CHANGELOG frequently to stay up-to-date on version releases or patch updates.
Updating your client does not impact the Luna Cloud HSM Service itself or any cryptographic objects stored on the service. As a best practice, back up any existing clients before proceeding with the upgrade to preserve the client's configuration.
When upgrading be aware of the following:
- Upgrading one client does not disrupt other clients' access to a Luna Cloud HSM Service. If the client you are upgrading is the only client connected to a Luna Cloud HSM Service, you will lose access to that service until the upgrade is complete. As only one Windows client can connect to a particular service, Windows deployments require planning for the access disruption.
- Any manual updates you have made to the
Chrystoki.conf
orcrystoki-template.ini
configuration file will not be copied following the client upgrade process. After the upgrade, you will need to re-apply any customization to the configuration file. - If you are using the SafeNet CSP or SafeNet KSP as part of your application integration you will need to re-register the SafeNet CSP or SafeNet KSP with the new version of the client.
- Following the upgrade any integrated applications may need to be restarted, reset or reconfigured to use the new version of the client before they can connect to the upgraded client.
- Re-initializing the Luna Cloud HSM Service will reset the Luna Cloud HSM Service and remove any cryptographic objects. Do NOT re-initialize the Luna Cloud HSM Service following the client upgrade. Log into
LunaCM
using the previously set passwords for the service.
If you would like to test the updated client before upgrading any production services, we recommend you sign up for a subscriber tenant account to gain access to the newest client for testing. Users can sign up for a subscriber tenant at the NA sign up page, or the EU sign up page. Refer to the client Troubleshooting material for detailed information about common issues users may encounter with the client.
To upgrade your client to the latest version
-
Back up your existing client as described in Backing up your Luna Cloud HSM Service.
-
Log in to your subscriber tenant as an application owner user.
-
Navigate to the My Services tab and click the service name that you would like to upgrade the client for.
-
In the Create Client wizard, enter a Service Name (Example:
service_upgraded_client.zip
) and click Create Client.A new client generates and is provided for downloading and installing on the client machine.
The client is a zip file that contains system information needed to connect your client machine to an existing partition. See the section client Contents for client content details.
-
Transfer the client to your machine. You can use SCP, PSCP, WinSCP, FTPS or other secure transfer tool to transfer the client.
-
Unzip the client.
-
Decompress the
cvclient-min.zip
or thecvclient-min.tar
for your operating system. Extract thecvclient-min.*
within theservice_upgraded_client
folder. Do not extract to a newcvclient-min
directory.Windows: Decompress the
cvclient-min.zip
using an extraction tool.Linux:
tar xvf cvclient-min.tar
-
Set the environment variable:
Windows: Right click
setenv.cmd
and select Run as Administrator, or executesetenv.cmd
from an administrator terminal.Linux:
source ./setenv
-
Copy any manual updates or customization from your old client
Chrystoki.conf
(Linux) orcrystoki.ini
(Windows) file to the newChrystoki.conf
orcrystoki.conf
file. Do not remove anything from the new files[REST]
orXTC
sections. -
Start
LunaCM
. From the directory where you unzipped thecvclient-min.zip
file executelunacm
. If the command executes with no errors, your connection is working correctly.Warning
Do not re-initialize the Luna Cloud HSM Service when upgrading to the new client. Initializing the Luna Cloud HSM Service will reset the service and remove any cryptographic objects.