Migrating from AWS CloudHSM Client SDK 3 to Client SDK 5

In AWS CloudHSM, customer applications perform cryptographic operations using the AWS CloudHSM Client Software Development Kit (SDK). Client SDK 5 is the primary SDK that continues to have new features and platform support added to it.

Client SDK 3 includes two separate command line tools: the CMU for managing users and the KMU for managing keys and performing operations with keys. Client SDK 5 consolidates the functions of the CMU and KMU (tools that were offered with Client SDK 3) into a single tool, the AWS CloudHSM Command Line Interface (CLI). User management operations can be found under the subcommands The user category in CloudHSM CLI and The quorum category in CloudHSM CLI. Key management operations can be found under the key subcommand, and cryptographic operations can be found under the crypto subcommand. See Reference for CloudHSM CLI commands for a complete list of commands.

For benefits on migrating, see Benefits of AWS CloudHSM Client SDK 5.

See the following topics for detailed instructions on migrating from Client SDK 3 to Client SDK 5. The latest version of AWS CloudHSM Client SDK is 5.16.

For functionality or use cases that are not supported by CloudHSM CLI, contact AWS Support.