Luna Network HSM Appliance Software 7.3.3
Luna Network HSM 7.3.3 was released in September 2019.
>Download Luna Network HSM Appliance Software 7.3.3 (includes Luna HSM Firmware 7.3.3 update)
New Features and Enhancements
Luna Network HSM 7.3.3 includes the following new features and enhancements:
Change in Routing Table
The Routing Table is displayed by entering lunash:> network route show, or at the bottom of the output for lunash:> network show.
Only one default gateway is now allowed.
The example below shows a default gateway on the eth0 interface.
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 220.127.116.11 0.0.0.0 UG 100 0 0 eth0
Add/Delete default gateway
You can now add or delete a default gateway on a network interface (eth0, eth1, eth2, eth3, bond0, bond1) only when the provided gateway value is 0.0.0.0. Use the following commands to add/delete a default gateway:
To add a default gateway to the eth0 interface
lunash:> network route add network 18.104.22.168 -device eth0 -gateway 0.0.0.0
To delete a default gateway from the eth0 interface
lunash:> network route delete network 22.214.171.124 -device eth0 -gateway 0.0.0.0
Bonding Interface MAC Always the Same
Prior to this release, bond0 and bond1 interfaces MAC address were randomly changing after rebooting the SafeNet Luna Network HSM.
bond0 MAC address will always be eth0 MAC address.
bond1 MAC address will always be eth2 MAC address.
Valid Update Paths
You can update the Luna Network HSM appliance software to version 7.3.3 from the following previous versions:
>7.2.0, 7.3.0, 7.3.1, 7.3.2
This section highlights important issues you should be aware of before deploying appliance software 7.3.3.
Install Luna Network HSM Reboot Patch Before Updating to Luna 7.3.3
Thales recommends installing the Luna Network HSM Reboot Patch before upgrading to Luna Network HSM appliance software 7.3.3.
Re-apply the Luna Network HSM Reboot Patch to Older Appliance Software Versions
The Luna Network HSM Reboot Patch is recommended for all Luna Network HSMs. Appliances currently shipped from the factory have this patch already installed, but if you use Luna Network HSM Appliance Software 7.4.0 or older in your production environment, you must re-apply the patch after performing one or both of the following actions:
>Updating to Luna Network HSM Appliance Software 7.4.0 or older
Luna 7.3.x Appliance Software Does Not Support 10G Optical Ethernet
The Luna Network HSM with 10G optical ethernet capability is not supported by the Luna 7.3.x appliance software. If you have a 10G-ready appliance, update appliance software to Luna Network HSM Appliance Software 7.4.0 or newer only.
CAUTION! Do not update the 10G appliance to Luna 7.3.x.
The port mapping will revert to the 1G configuration and you will lose 10G support. The appliance might require RMA to fix the port mapping.
NTP Server May Take Slightly Longer to Connect/Disconnect After Updating to Luna 7.3.x or newer
If you are using NTP, then after you update to Luna 7.3.x you might find that the Luna Network HSM appliance takes longer to synchronize with the NTP server.
To reduce the synchronization time, specify the -iburst option when adding an NTP server:
lunash:> sysconf ntp addserver <hostname/IP> -iburst
This causes the server to more rapidly synchronize when first connecting/reconnecting.