- System Requirements
- What's New
The following are prerequisites for installing Navigator Key HSM:
- RHEL or CentOS x64 6.4, 6.5, 6.6, 6.7, 7.1
- Oracle Java Runtime Environment (JRE) 6 or higher
- A supported HSM device:
- SafeNet Luna
- Firmware versions: 6.2.1
- Client version: 5.2.3-1
- SafeNet KeySecure
- Firmware version: 8.0.0
- Client version: 8.0.1
- Thales nSolo
- Firmware version: 11.4.0
- Client version: 2.28.9cam136
- SafeNet Luna
- Connectivity to Key Trustee Server 3.7 or higher
Important: Cloudera strongly recommends installing Key HSM on the same host as the Key Trustee Server. Although it is possible to install Key HSM on a separate host and communications between Key HSM and Key Trustee Server are secured by TLS, doing so unnecessarily increases the attack surface of the system.
Root access is required to install Navigator Key HSM.
Issues Fixed in Cloudera Navigator Key HSM 1.5.1
Upgrading Key HSM removes init script
Upgrading Key HSM from 1.4.x to 1.5.x removes the Key HSM init script and /usr/bin/keyhsm binary. With this fix, future upgrades (from 1.5.1 to a higher release) do not experience this issue. To resolve the issue after upgrading to 1.5.x, reinstall Key HSM (yum reinstall keytrustee-keyhsm).
Want to Get Involved or Learn More?
Check out our other resources
Receive expert Hadoop training through Cloudera University, the industry's only truly dynamic Hadoop training curriculum that’s updated regularly to reflect the state of the art in big data.