The HSM driver is custom built for a specific version of the Linux Kernel. This means if the kernel version changes, the driver will not be loaded until it is rebuilt for the new kernel. This usually only occurs if StrongKey Tellaro Appliance is rebooted after updating to a newer kernel. It is important to note that after running an update through Yum, the new kernel isn't immediately loaded.
To ensure there are no unexpected issues during future maintenance periods, the appliance should immediately be rebooted and the driver rebuilt after updating the kernel. After rebooting the appliance, run the following steps as the root user to rebuild the driver:
Get the latest version of the HSM Distribution (V4.80.0.0)
Move to the software directory and untar the u.trust_anchor_product_bundle-4.80.0.0.tar.gz
shell> cd /usr/local/software
shell> tar zvxf u.trust_anchor_product_bundle-4.80.0.0.tar.gz
This distribution requires DKMS package which is part of the EPEL repository:
shell> yum install dkms
Change directory to the Software distribution
shell> cd /usr/local/software/u.trust_anchor_product_bundle-4.80.0.0/Software/Linux/Driver
Install the package:
shell> rpm -ivh cryptoserver-dkms-5.28.0-Linux.rpm
Reboot the server
shell> init 6
Login and open a terminal. Run the following commands to verify if the device driver is loaded correctly and '/dev/cs2.0' file is available:
shell> ls -al /dev/cs2.0
shell> lsmod | grep cryptoserver
shell> csadm DEV=/dev/cs2.0 getstate
This completes rebuilding the HSM Driver.