Product Documentation

The HSM driver is custom built for a specific version of the Linux Kernel. This means if the kernel version changes, the driver will not be loaded until it is rebuilt for the new kernel. This usually only occurs if StrongKey Tellaro Appliance is rebooted after updating to a newer kernel. It is important to note that after running an update through Yum, the new kernel isn't immediately loaded.

To ensure there are no unexpected issues during future maintenance periods, the appliance should immediately be rebooted and the driver rebuilt after updating the kernel. After rebooting the appliance, run the following steps as the root user to rebuild the driver:

  1. Get the latest version of the HSM Distribution (V4.80.0.0)

  2. Move to the software directory and untar the u.trust_anchor_product_bundle-4.80.0.0.tar.gz

    shell> cd /usr/local/software
    shell> tar zvxf u.trust_anchor_product_bundle-4.80.0.0.tar.gz
    
  3. This distribution requires DKMS package which is part of the EPEL repository:

    shell> yum install dkms
  4. Change directory to the Software distribution

    shell> cd /usr/local/software/u.trust_anchor_product_bundle-4.80.0.0/Software/Linux/Driver
  5. Install the package:

    shell> rpm -ivh cryptoserver-dkms-5.28.0-Linux.rpm
  6. Reboot the server

    shell> init 6
  7. Login and open a terminal. Run the following commands to verify if the device driver is loaded correctly and '/dev/cs2.0' file is available:

    shell> ls -al /dev/cs2.0
    shell> lsmod | grep cryptoserver
    shell> csadm DEV=/dev/cs2.0 getstate
    

 

This completes rebuilding the HSM Driver.