本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。 # 在 Linux 上升級 AWS CloudHSM 用戶端 SDK 3 **** SDK 5.8.0 版和更早版本已終止支援。2025 年 3 月 31 日之後，開發套件 3.4.4 版及更早版本的文件將不再提供。使用 AWS CloudHSM 用戶端 SDK 3.1 和更新版本，用戶端協助程式的版本和您安裝的任何元件都必須相符才能升級。對於所有 Linux 系統，您必須使用單一命令，以相同版本的 PKCS \$111 程式庫、Java 密碼編譯延伸模組 (JCE) 提供者或 OpenSSL 動態引擎來批次升級用戶端常駐程式。這項需求不適用於 Windows 系統，因為 CNG 和 KSP 提供者的二進位檔案已經包含在用戶端常駐程式套件中。 ## 檢查用戶端常駐程式版本 + 在基於 Red Hat 的 Linux 系統 (包括 Amazon Linux 和 CentOS) 上，使用以下命令： ``` rpm -qa | grep ^cloudhsm ``` + 在基於 Debian 的 Linux 系統上，請使用下列命令： ``` apt list --installed | grep ^cloudhsm ``` + 在 Windows 系統上，請使用下列命令： ``` wmic product get name,version ``` **Topics** + [先決條件](#client-upgrade-prerequisites) + [步驟 1：停止用戶端常駐程式](#client-stop) + [步驟 2：升級用戶端 SDK](#upgrade-commands) + [步驟 3：啟動用戶端常駐程式](#client-start) ## 先決條件下載最新版本的 AWS CloudHSM 用戶端協助程式，然後選擇您的元件。 **注意** 您不必安裝所有元件。對於已安裝的每個元件，您必須升級該元件以符合用戶端常駐程式的版本。 ### 最新的 Linux 用戶端常駐程式 ------ #### [ Amazon Linux ] ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-latest.el6.x86_64.rpm ``` ------ #### [ Amazon Linux 2 ] ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 7 ] ``` sudo yum install wget ``` ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 8 ] ``` sudo yum install wget ``` ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm ``` ------ #### [ RHEL 7 ] ``` sudo yum install wget ``` ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm ``` ------ #### [ RHEL 8 ] ``` sudo yum install wget ``` ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm ``` ------ #### [ Ubuntu 16.04 LTS ] ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client_latest_amd64.deb ``` ------ #### [ Ubuntu 18.04 LTS ] ``` wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client_latest_u18.04_amd64.deb ``` ------ ### 最新的 PKCS \$111 程式庫 ------ #### [ Amazon Linux ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-pkcs11-latest.el6.x86_64.rpm ``` ------ #### [ Amazon Linux 2 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 8 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm ``` ------ #### [ RHEL 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm ``` ------ #### [ RHEL 8 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-pkcs11_latest_amd64.deb ``` ------ #### [ Ubuntu 18.04 LTS ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-pkcs11_latest_u18.04_amd64.deb ``` ------ ### 最新的 OpenSSL 動態引擎 ------ #### [ Amazon Linux ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm ``` ------ #### [ Amazon Linux 2 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm ``` ------ #### [ RHEL 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-dyn_latest_amd64.deb ``` ------ ### 最新的 JCE 提供者 ------ #### [ Amazon Linux ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-jce-latest.el6.x86_64.rpm ``` ------ #### [ Amazon Linux 2 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm ``` ------ #### [ CentOS 8 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm ``` ------ #### [ RHEL 7 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm ``` ------ #### [ RHEL 8 ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-jce_latest_amd64.deb ``` ------ #### [ Ubuntu 18.04 LTS ] ``` $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-jce_latest_u18.04_amd64.deb ``` ------ ## 步驟 1：停止用戶端常駐程式使用以下命令來停止用戶端常駐程式。 ------ #### [ Amazon Linux ] ``` $ sudo stop cloudhsm-client ``` ------ #### [ Amazon Linux 2 ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ CentOS 7 ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ CentOS 8 ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ RHEL 7 ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ RHEL 8 ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ sudo service cloudhsm-client stop ``` ------ #### [ Ubuntu 18.04 LTS ] ``` $ sudo service cloudhsm-client stop ``` ------ ## 步驟 2：升級用戶端 SDK 下列命令顯示升級用戶端常駐程式和元件所需的語法。執行命令之前，請先移除任何您不想升級的元件。 ------ #### [ Amazon Linux ] ``` $ sudo yum install ./cloudhsm-client-latest.el6.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el6.x86_64.rpm> \ <./cloudhsm-client-dyn-latest.el6.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el6.x86_64.rpm> ``` ------ #### [ Amazon Linux 2 ] ``` $ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm> \ <./cloudhsm-client-dyn-latest.el7.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el7.x86_64.rpm> ``` ------ #### [ CentOS 7 ] ``` $ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm> \ <./cloudhsm-client-dyn-latest.el7.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el7.x86_64.rpm> ``` ------ #### [ CentOS 8 ] ``` $ sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el8.x86_64.rpm> ``` ------ #### [ RHEL 7 ] ``` $ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm> \ <./cloudhsm-client-dyn-latest.el7.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el7.x86_64.rpm> ``` ------ #### [ RHEL 8 ] ``` $ sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \ <./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm> \ <./cloudhsm-client-jce-latest.el8.x86_64.rpm> ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ sudo apt install ./cloudhsm-client_latest_amd64.deb \ \ \ ``` ------ #### [ Ubuntu 18.04 LTS ] ``` $ sudo apt install ./cloudhsm-client_latest_u18.04_amd64.deb \ \ ``` ------ ## 步驟 3：啟動用戶端常駐程式使用下列命令來啟動用戶端常駐程式。 ------ #### [ Amazon Linux ] ``` $ sudo start cloudhsm-client ``` ------ #### [ Amazon Linux 2 ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ CentOS 7 ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ CentOS 8 ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ RHEL 7 ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ RHEL 8 ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ Ubuntu 16.04 LTS ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ Ubuntu 18.04 LTS ] ``` $ sudo systemctl start cloudhsm-client ``` ------ #### [ Ubuntu 20.04 LTS ] ``` $ sudo systemctl start cloudhsm-client ``` ------