Complete the following setup before you use AWS CloudHSM key_mgmt_util (KMU).
Step 1. Start the AWS CloudHSM client
Before you use key_mgmt_util, you must start the AWS CloudHSM client. The client is a daemon that establishes end-to-end encrypted communication with the HSMs in your cluster. The key_mgmt_util tool uses the client connection to communicate with the HSMs in your cluster. Without it, key_mgmt_util doesn't work.
To start the AWS CloudHSM client
Use the following command to start the AWS CloudHSM client.
$
sudo start cloudhsm-client
Step 2. Start key_mgmt_util
After you start the AWS CloudHSM client, use the following command to start key_mgmt_util.
$
/opt/cloudhsm/bin/key_mgmt_util
The prompt changes to Command:
when key_mgmt_util is running.
If the command fails, such as returning a Daemon socket connection error
message, try
updating your configuration file.