After a BIG-IP® system software or hotfix upgrade, you must run the SafeNet Luna SA client setup script to restore your default SafeNet configuration. Any local keys and certificates you added to the BIG-IP system configuration before upgrading (using the command tmsh install sys crypto) appear in the upgrade partition, but they are usable only after you run the SafeNet Luna SA client setup script. Keys, certificates, and CSRs created using tmsh are already part of the BIG-IP system configuration, and can be used after running the SafeNet script. If you are restoring the Luna SA client on a VIPRION® system, you run the script only on the primary blade, and then the system propagates the configuration to the additional active blades.
The nethsm-safenet-install.sh utility includes these options:
|--hsm_ip_addr=<ip_addr>||SafeNet Luna SA HSM IP address|
|--hsm_username=<user_name>||SafeNet Luna SA HSM user name. Default is admin.|
|--interface=<interface_name>||BIG-IP system interface used to communicate with the SafeNet Luna SA HSM. Default is the management interface.|
|--client_ip_addr=<client_ip_addr>||IP address of the BIG-IP system, as seen by the SafeNet Luna SA HSM|
|--hsm_password=<password>||SafeNet Luna SA HSM partition password|
|--image=<image_name>||SafeNet Luna SA tarball to be installed (for example, Luna_5.1_Client_Software.tar). This file must be stored on the BIG-IP system in /shared/safenet_install.|