本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
在 Linux 上升級用戶端 SDK 3
使用 AWS CloudHSM Client SDK 3.1 及更新版本時,用戶端精靈的版本和您安裝的任何元件都必須符合才能升級。對於所有 Linux 系統,您必須使用單一命令,以相同版本的 PKCS #11 程式庫、Java 密碼編譯延伸模組 (JCE) 提供者或 OpenSSL 動態引擎來批次升級用戶端常駐程式。這項需求不適用於 Windows 系統,因為 CNG 和 KSP 提供者的二進位檔案已經包含在用戶端常駐程式套件中。
-
在基於 Red Hat 的 Linux 系統 (包括 Amazon Linux 和 CentOS) 上,使用以下命令:
rpm -qa | grep ^cloudhsm
-
在基於 Debian 的 Linux 系統上,請使用下列命令:
apt list --installed | grep ^cloudhsm
-
在 Windows 系統上,請使用下列命令:
wmic product get name,version
必要條件
下載最新版本的 AWS CloudHSM 客戶端守護程序並選擇您的組件。
注意
您不必安裝所有元件。對於已安裝的每個元件,您必須升級該元件以符合用戶端常駐程式的版本。
最新的 Linux 用戶端常駐程式
- Amazon Linux
-
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-latest.el6.x86_64.rpm
- Amazon Linux 2
-
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
- CentOS 7
-
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
- CentOS 8
-
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
- RHEL 7
-
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
- RHEL 8
-
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
- Ubuntu 16.04 LTS
-
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client_latest_amd64.deb
- Ubuntu 18.04 LTS
-
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client_latest_u18.04_amd64.deb
最新的 PKCS #11 程式庫
- Amazon Linux
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-pkcs11-latest.el6.x86_64.rpm
- Amazon Linux 2
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
- CentOS 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
- CentOS 8
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm
- RHEL 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
- RHEL 8
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm
- Ubuntu 16.04 LTS
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-pkcs11_latest_amd64.deb
- Ubuntu 18.04 LTS
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-pkcs11_latest_u18.04_amd64.deb
最新的 OpenSSL 動態引擎
- Amazon Linux
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm
- Amazon Linux 2
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
- CentOS 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
- RHEL 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
- Ubuntu 16.04 LTS
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-dyn_latest_amd64.deb
最新的 JCE 提供者
- Amazon Linux
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-jce-latest.el6.x86_64.rpm
- Amazon Linux 2
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
- CentOS 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
- CentOS 8
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm
- RHEL 7
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
- RHEL 8
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm
- Ubuntu 16.04 LTS
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-jce_latest_amd64.deb
- Ubuntu 18.04 LTS
-
$
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-jce_latest_u18.04_amd64.deb
步驟 1:停止用戶端常駐程式
使用以下命令來停止用戶端常駐程式。
- Amazon Linux
$
sudo stop cloudhsm-client
- Amazon Linux 2
$
sudo service cloudhsm-client stop
- CentOS 7
$
sudo service cloudhsm-client stop
- CentOS 8
$
sudo service cloudhsm-client stop
- RHEL 7
$
sudo service cloudhsm-client stop
- RHEL 8
$
sudo service cloudhsm-client stop
- Ubuntu 16.04 LTS
$
sudo service cloudhsm-client stop
- Ubuntu 18.04 LTS
$
sudo service cloudhsm-client stop
步驟 2:升級用戶端 SDK
下列命令顯示升級用戶端常駐程式和元件所需的語法。執行命令之前,請先移除任何您不想升級的元件。
- Amazon Linux
-
$
sudo yum install ./cloudhsm-client-latest.el6.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el6.x86_64.rpm>
\<./cloudhsm-client-dyn-latest.el6.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el6.x86_64.rpm>
- Amazon Linux 2
-
$
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>
\<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el7.x86_64.rpm>
- CentOS 7
-
$
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>
\<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el7.x86_64.rpm>
- CentOS 8
-
$
sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el8.x86_64.rpm>
- RHEL 7
-
$
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>
\<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el7.x86_64.rpm>
- RHEL 8
-
$
sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \
<./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm>
\<./cloudhsm-client-jce-latest.el8.x86_64.rpm>
- Ubuntu 16.04 LTS
-
$
sudo apt install ./cloudhsm-client_latest_amd64.deb \
<cloudhsm-client-pkcs11_latest_amd64.deb>
\<cloudhsm-client-dyn_latest_amd64.deb>
\<cloudhsm-client-jce_latest_amd64.deb>
- Ubuntu 18.04 LTS
-
$
sudo apt install ./cloudhsm-client_latest_u18.04_amd64.deb \
<cloudhsm-client-pkcs11_latest_amd64.deb>
\<cloudhsm-client-jce_latest_amd64.deb>
步驟 3:啟動用戶端常駐程式
使用下列命令來啟動用戶端常駐程式。
- Amazon Linux
$
sudo start cloudhsm-client
- Amazon Linux 2
$
sudo service cloudhsm-client start
- CentOS 7
$
sudo service cloudhsm-client start
- CentOS 8
$
sudo service cloudhsm-client start
- RHEL 7
$
sudo service cloudhsm-client start
- RHEL 8
$
sudo service cloudhsm-client start
- Ubuntu 16.04 LTS
$
sudo service cloudhsm-client start
- Ubuntu 18.04 LTS
$
sudo service cloudhsm-client start
- Ubuntu 20.04 LTS
$
sudo service cloudhsm-client start
- Ubuntu 22.04 LTS
目前尚未提供對 OpenSSL 動態引擎的支援。
支援平台
PKCS #11 程式庫