Upgrading Cloudera Navigator Key HSM
Setting Up an Internal Repository
You must create an internal repository to install or upgrade Cloudera Navigator Key HSM. For instructions on creating internal repositories (including Cloudera Manager, CDH, and Cloudera Navigator encryption components), see Using an Internal Package Repository.
Upgrading Key HSM
- Install the Cloudera Repository
Add the internal repository you created. See Modifying Clients to Use the Internal Repository for more information.Import the GPG key by running the following command:
$ sudo rpm --import http://repo.example.com/path/to/RPM-GPG-KEY-cloudera
- Install the CDH Repository
Key Trustee Server and Key HSM depend on the bigtop-utils package, which is included in the CDH repository. For instructions on adding the CDH repository, see Step 1: Configure a Repository.
- Stop the Key HSM Service
Stop the Key HSM service before upgrading:
$ sudo service keyhsm shutdown
- Upgrade Navigator Key HSM
Upgrade the Navigator Key HSM package using yum:
$ sudo yum update keytrustee-keyhsm
Cloudera Navigator Key HSM is installed to the /usr/share/keytrustee-server-keyhsm directory by default.
- Start the Key HSM Service
Start the Key HSM service:
$ sudo service keyhsm start