AWS CloudHSM previous Client SDK releases - AWS CloudHSM

AWS CloudHSM previous Client SDK releases

This section lists previous Client SDK releases.

Amazon Linux 2023

Download version 5.16.2 software for Amazon Linux 2023 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum e223649cbf689afaeca445b962cceaab3c143b901ee7974a7a5360b6424c409b)

  • OpenSSL Dynamic Engine (SHA256 checksum 9b51e8b1429f22705399299c111385e9434873a1dd26dda2c70498646590148c)

  • JCE provider (SHA256 checksum 45ec10c2e3d592fb1fe56cc9dee1d8653e3a6dfa15b8185618fd3cf66c567314)

  • CloudHSM CLI (SHA256 checksum 8134a0e316286310eda1606b6a14e1c9fd6f0e27934a43e55e24d3094ef870a6)

Download version 5.16.2 software for Amazon Linux 2023 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 7556c69294d0c67b359cf9995ec7047cdc90e21542d2c9d5e110e35f13c329c5)

  • OpenSSL Dynamic Engine (SHA256 checksum 6ab4f3b9731a6f26891658f5e3a0ff74255096390c42aa7f702ba07e0bd924b1)

  • JCE provider (SHA256 checksum 98b80696762a73f3f9fbe6c3c7af0f8f9db23ba63d66d4d941690b6698019702)

  • CloudHSM CLI (SHA256 checksum 649397606f527f330049cf7adb5ad667126dfd7f63f878f1f46b469e2f127814)

Amazon Linux 2

Download version 5.16.2 software for Amazon Linux 2 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 073ee736ad9c7de6e6451afdecc4d77e6ed1a63f314a7fc09373ff35986fa0fc)

  • OpenSSL Dynamic Engine (SHA256 checksum b174fb24a15f1e22dd520ea9ac4ac14229c2adce14ac6df8901f9d3c0e7e24f6)

  • JCE provider (SHA256 checksum f18e42f2679ab0fb51c421965a5dd6c8fe1361442d92403d1d230bedb003b27a)

  • CloudHSM CLI (SHA256 checksum 5a6c83833b60017dd494c31fd4abf3896f57177be7951674c85d0d4e909d2041)

Download version 5.16.2 software for Amazon Linux 2 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum df2c97a27855916983f242eba05e0741335158432ac46ebbeae47c4a3b7b0bef)

  • OpenSSL Dynamic Engine (SHA256 checksum d25456e3da39c63d9c0d4a928815f995239b146f4f0b26a8c50c742905543207)

  • JCE provider (SHA256 checksum 7e31734efbaae49203e57d7ad4d1e291faa5b7e16c469a3596da82a7380bceeb)

  • CloudHSM CLI (SHA256 checksum b77eb1f9ff58ccc864854d7f261e331ce50836cd770efc8e8eaebb33d78c23e2)

RHEL 10 (10.0+)

Download version 5.16.2 software for RHEL 10 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 8044cb40c9c65ae944900c740308e68eeb0156d3b93051d60463cd3f6095ef67)

  • JCE provider (SHA256 checksum a1b7f110c2b15ba7ce9adee74baf1f108d85146269321991314f9153a074ca27)

  • CloudHSM CLI (SHA256 checksum 3ded29fdb74537b284cf871af91dd64fce8483770141a3e4470e94fb69524621)

Download version 5.16.2 software for RHEL 10 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 643fa23ffea47dfb21fd326cacf99e0e45f44d767ca6198ab06023239eda5d2c)

  • JCE provider (SHA256 checksum e6b5c2760c60f5c82a248d36f3b47cea9b1bbb743cf1c02a1c13554b70ab87f8)

  • CloudHSM CLI (SHA256 checksum a6af281ff9f429f964ac9d2babc251b4423748d2b2e6da22fc51b9fd5c59714c)

RHEL 9 (9.2+)

Download version 5.16.2 software for RHEL 9 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum e0a44849c9cb562cf803ff182e54a35e7eee682efa2a99fdfac51a996822d126)

  • OpenSSL Dynamic Engine (SHA256 checksum 97463a8a88239d4a81854f2a4da7e0371dbcb375a662c7eae7753c371ef3c39f)

  • JCE provider (SHA256 checksum 10cd4b9826451b7e9a11390cabcc7df548f5b3197e8bc87f5efe04605e503dc1)

  • CloudHSM CLI (SHA256 checksum 6c7fc59dcce4d7bc0c4460ae7c793f13fcbb306924942bc6e1457f729602f76f)

Download version 5.16.2 software for RHEL 9 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 7b8d3f5e2bd09f30ddc1599619c63aa4452b16e1037bf10af070c055ae48cbd7)

  • OpenSSL Dynamic Engine (SHA256 checksum 4edb0315c050b3b0699cb244fe36b987c9fd2921999cf7519fb669354d2efe2d)

  • JCE provider (SHA256 checksum eae2064d9523df9f819ef4c7950a0ad15ef8bb01d8dcec062ee2558f5bebf029)

  • CloudHSM CLI (SHA256 checksum f9f4073ebcde2b654b706efb1c0f99c08fe24903576e760029097b0e3c783f6a)

RHEL 8 (8.3+)

Download version 5.16.2 software for RHEL 8 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 9a3e023fd5ac8c444ef07bb28b96e81b467e066c9dc2da19f648f38eb04d05c9)

  • OpenSSL Dynamic Engine (SHA256 checksum 6fc6ca58f16fe2f486f4730cd0a6029eeeebae98b3aed41fd8c605fe5c36c7a0)

  • JCE provider (SHA256 checksum cb6e9eccfeebca7377b1fb815c2ae306b39b271513ce73a6cd5f1dccb55eac4c)

  • CloudHSM CLI (SHA256 checksum e848f3f2221e7f6b984bd2001331f9e90f20e6d7351484e4e2f12431c00d87e5)

Ubuntu 24.04 LTS

Download version 5.16.2 software for Ubuntu 24.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum d993f8c84d15cf93432b73cb37693c4ab68b3e765c35742adef3f947744b9893)

  • OpenSSL Dynamic Engine (SHA256 checksum 055f0e4cc74ec7ead77fff3970422b4f1729e26a2cf3cc2be530f0e6a06f887e)

  • JCE provider (SHA256 checksum 5bd62f8f5cb3ff4ae9430020aa4f5c8a29cb635674d2400d989f512c370c755c)

  • CloudHSM CLI (SHA256 checksum de263f6035cf7280a982434448aa079164050e4a09508816fd06bf000cf15f0c)

Download version 5.16.2 software for Ubuntu 24.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum a6496f28f82f3e92b0acc8e3ae1fbe230a6d3ed82586e8ca6fe6d2f82c275e7c)

  • OpenSSL Dynamic Engine (SHA256 checksum 82275d6ac2628b4291162e3609d6788b4cf01d6488a9b6a84ed8787a5a96e873)

  • JCE provider (SHA256 checksum 67800957c69efca0fe01623364cb3b152f2780d15624955130d507a3f591e8e5)

  • CloudHSM CLI (SHA256 checksum 088f53d75250aa0ce3db7a7ba3f06ad7804b3dbeed6226683a3252890a867ac6)

Ubuntu 22.04 LTS

Download version 5.16.2 software for Ubuntu 22.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum b9799ba75fb8885782283abae7f49aa76a72d27f692654dd3a415157f0ea9043)

  • OpenSSL Dynamic Engine (SHA256 checksum 3c7675e9b7fa4bb692865559f09fc1f9fd78dadb97d8bd6b5d1fc03367d75b86)

  • JCE provider (SHA256 checksum 37c21821ad4d9fde9551112e8a6d7ec6b7bb62a540c0c08b6edd650d5c87b5cf)

  • CloudHSM CLI (SHA256 checksum 7d3a724892e993aebfb06ad5c3d1ef8fc650d65dff0a7de3cb9c17c089badc58)

Download version 5.16.2 software for Ubuntu 22.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 8a2b392e48b7f9021966f6c457444ddd0964f9bb85b7ecb988bc0d372bbef6c9)

  • OpenSSL Dynamic Engine (SHA256 checksum cca0736d208d59d070ced8b82181e24919f21fbf0497e5a8a2f40436e06a8dd9)

  • JCE provider (SHA256 checksum c12e1b9bfe1cc78ecf35892050dd06904c6a29736cc628ac1481dca4ec3e3bfe)

  • CloudHSM CLI (SHA256 checksum 586ee7663d54e76652e9f073772fcbda218dc3c6432a221d664ffbabee3590cd)

Windows Server 2025

Download version 5.16.2 software for Windows Server 2025 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum b5f55bc72fc994244f09e0252c7fc4a3ddf9607b20860c8718ff1d8a3db0a177)

  • JCE provider (SHA256 checksum c28ea8164f277bf067f4630d433ab7090b370225116a2d594dd563dfb5f9f991)

  • CloudHSM CLI (SHA256 checksum db708fc33bdc91b9ad554aa63de86a572d3ccff4ba3ab10feac9c5fd9ed79b94)

  • Key Storage Provider (KSP) (SHA256 checksum c060be59673f325240bd0f1ccc9d9d97639eb7937fa323d71e223451bc0d2e19)

Windows Server 2022

Download version 5.16.2 software for Windows Server 2022 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum b5f55bc72fc994244f09e0252c7fc4a3ddf9607b20860c8718ff1d8a3db0a177)

  • JCE provider (SHA256 checksum c28ea8164f277bf067f4630d433ab7090b370225116a2d594dd563dfb5f9f991)

  • CloudHSM CLI (SHA256 checksum db708fc33bdc91b9ad554aa63de86a572d3ccff4ba3ab10feac9c5fd9ed79b94)

  • Key Storage Provider (KSP) (SHA256 checksum c060be59673f325240bd0f1ccc9d9d97639eb7937fa323d71e223451bc0d2e19)

Windows Server 2019

Download version 5.16.2 software for Windows Server 2019 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum b5f55bc72fc994244f09e0252c7fc4a3ddf9607b20860c8718ff1d8a3db0a177)

  • JCE provider (SHA256 checksum c28ea8164f277bf067f4630d433ab7090b370225116a2d594dd563dfb5f9f991)

  • CloudHSM CLI (SHA256 checksum db708fc33bdc91b9ad554aa63de86a572d3ccff4ba3ab10feac9c5fd9ed79b94)

  • Key Storage Provider (KSP) (SHA256 checksum c060be59673f325240bd0f1ccc9d9d97639eb7937fa323d71e223451bc0d2e19)

Windows Server 2016

Download version 5.16.2 software for Windows Server 2016 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum b5f55bc72fc994244f09e0252c7fc4a3ddf9607b20860c8718ff1d8a3db0a177)

  • JCE provider (SHA256 checksum c28ea8164f277bf067f4630d433ab7090b370225116a2d594dd563dfb5f9f991)

  • CloudHSM CLI (SHA256 checksum db708fc33bdc91b9ad554aa63de86a572d3ccff4ba3ab10feac9c5fd9ed79b94)

  • Key Storage Provider (KSP) (SHA256 checksum c060be59673f325240bd0f1ccc9d9d97639eb7937fa323d71e223451bc0d2e19)

Client SDK 5.16.2 adds support for RHEL 10 platform and removes support for Ubuntu 20.04 LTS. Client SDK 5.16.2 also adds support for JCE Provider and KSP with new features, while delivering bug fixes and improvements across other SDKs.

Platform support
  • Added RHEL 10 support for x86 and ARM architectures.

    • OpenSSL Engine is not supported in RHEL 10 as part of Red Hat's transition to the newer Provider-based architecture introduced in OpenSSL 3.0.

CloudHSM CLI
  • Fixed a bug where signing with prehashed data did not clear tokens in interactive mode.

  • Fixed a bug in quorum token-sign list that previously caused errors when three or more tokens were present.

JCE provider
  • Added support for finding Elliptic Curve (EC) keys using ECParameters and ECPoint for hsm2m.medium types.

  • Added sharedInfo parameter support for ECDH with X9.63 KDF.

PKCS #11 library
  • Added support for finding Elliptic Curve (EC) keys using ECParameters and ECPoint for hsm2m.medium types.

Bug fixes/Improvements
  • Enhanced token listing functionality to display more tokens in a single operation.

  • Fixed key usage token clearing issue in CloudHSM CLI interactive mode when signing with prehashed data.

  • Resolved a known issue where some HSM throttled operations on hsm2m.medium would not be automatically retried. Refer to Issue: Operations can fail during backup creation for details.

Amazon Linux 2023

Download version 5.16.1 software for Amazon Linux 2023 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 342e81846436708cfc1fb459a7ef1c7b065d8a68b50a5e63653c24918d0338a0)

  • OpenSSL Dynamic Engine (SHA256 checksum 4e83bebcd20201c04629a03b70136df8d225d3056346789054c4e2ce8c9b3cba)

  • JCE provider (SHA256 checksum 014e3c804a56087f8855ed30e480f9c193def0e1132a4769eae3ecd235d76c4f)

  • CloudHSM CLI (SHA256 checksum 854c5c21f9fbef4f53a710340f213c272365c2bb1233106266eca5a5aa547e11)

Download version 5.16.1 software for Amazon Linux 2023 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum dbe9498d91e1e2e8f80fc870a4a6576b0dc801dc20cb7a82bfded79b3a362ac0)

  • OpenSSL Dynamic Engine (SHA256 checksum 76cff941f36275163db146e05bf5fe64440248643ceb5dfcb3b64103f4f016a7)

  • JCE provider (SHA256 checksum 8c38082797172b5630c74a8fc0c9e2652f0898bd2232b72911fbbaaa0260b5a6)

  • CloudHSM CLI (SHA256 checksum 2a0640e32405a7db138afb2444a542eab11c0a7d9610d5406478c7ac4602a14b)

Amazon Linux 2

Download version 5.16.1 software for Amazon Linux 2 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum cfa59458ec239553c86ac55773bebc69a5dc7cdc08a3927917fd5918e10abe93)

  • OpenSSL Dynamic Engine (SHA256 checksum 49e50bece7d73f3b7dc95eed1df856a6dee40e27f24f40f015c6a4a2e8dee839)

  • JCE provider (SHA256 checksum 85c8853860aa36a6c54e75c94d607a334d64dd34683ba70430ff5be61eedcc56)

  • CloudHSM CLI (SHA256 checksum 0efc3783e8429331aa446e45776fef46c7f9726a4768763ba4881dc2b05e090e)

Download version 5.16.1 software for Amazon Linux 2 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum dad60a0380ef0ea9c469cae4de10dc47124bbecedafb6956d009734cd49abceb)

  • OpenSSL Dynamic Engine (SHA256 checksum 7ee303421d94544cbe9df03022c48af327833e631d8f1ec59a466673b6e9395d)

  • JCE provider (SHA256 checksum 5ebe8157abb042ee92a7edfbfcb98bf79fc3a9907684565176fd28c387c08e88)

  • CloudHSM CLI (SHA256 checksum 5e76b4a9021a3c92e59fc608c8263af731013835738977f376fb8ad9189add56)

RHEL 9 (9.2+)

Download version 5.16.1 software for RHEL 9 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 696e58f74d89bd8e39f85bddc547f8c94fa2fbca498318a7bb94f22e8be7a668)

  • OpenSSL Dynamic Engine (SHA256 checksum 86197cd8bdd70db91331bb8380ea094352b4087c95a04768d2cefc3bba18dffa)

  • JCE provider (SHA256 checksum 37ccc2df3e8aaddda74dc060f7f5bbe63e4769311f2ccbf313a8ab5d8831f206)

  • CloudHSM CLI (SHA256 checksum 45a6db22db9ae64c239b49ea9281d29d2b4364dd63ee2408f463de17c4da1877)

Download version 5.16.1 software for RHEL 9 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum fd79fbccf504f53a6e70497135fcea4e20982fca75b628124c7510dcbaddf56c)

  • OpenSSL Dynamic Engine (SHA256 checksum 23fe7407be9c5f8da0ae64e560a9741887bc31936f0b88c8d1490e3c6893a8a8)

  • JCE provider (SHA256 checksum bd1c43e3e28c2f71e78a41342c064ff873fd8e052f89f90227fe00eaa28f089e)

  • CloudHSM CLI (SHA256 checksum 3e877a232303052b8a6b2b869dcf228edbb0da913d3d41393f622831f4455a27)

RHEL 8 (8.3+)

Download version 5.16.1 software for RHEL 8 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum d396c53c229b1eaa7cb30d4fcd17addc9170c7942795d1c82b23a157ec379686)

  • OpenSSL Dynamic Engine (SHA256 checksum c01f2cb66a6c5be839906b25c6a7f7990507b1b8ec3da34c128c1a90838e48df)

  • JCE provider (SHA256 checksum 1745ab78de0712111659e91301f80e771e1b7ebc2ff8c4cc5e37bce591058520)

  • CloudHSM CLI (SHA256 checksum b3ca40ba66062856ef63848c71f6e9dfa0a46a2b18d44c2d96a798fc4a4fb9cf)

Ubuntu 24.04 LTS

Download version 5.16.1 software for Ubuntu 24.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum ade113ee72547cb6a8fe91a4f3ac403f462d0acd0a306f01d16ac90699f9b59c)

  • OpenSSL Dynamic Engine (SHA256 checksum 9e00cb32b16fbb286a853f65c5c5154c3e805ad67820d829a0c5343f12cc9e00)

  • JCE provider (SHA256 checksum 4fab322a138e14372aba394de29f444af640479dd338539be84e0cf659c8993b)

  • CloudHSM CLI (SHA256 checksum f8c1e369885eb77ba4517388dab47c067a617e860fb67a028a1ebde0f96acaef)

Download version 5.16.1 software for Ubuntu 24.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 5e15a69f8fb1429ed5c10429c91323fe82a63c0fe7bcc2f968820733d1737449)

  • OpenSSL Dynamic Engine (SHA256 checksum f5136ee61bd34b74d59a01d37964b70a0f80ec5981f732b265af1c5466309e6f)

  • JCE provider (SHA256 checksum acf5bebe7009461cdc1e31b95caadcbf80da09ec78d8f69142072da9baf61b79)

  • CloudHSM CLI (SHA256 checksum 511376d2faf9f991f2193d08f80fc1edd53bf06daaa6fd8bd7a3fba0d6563ad1)

Ubuntu 22.04 LTS

Download version 5.16.1 software for Ubuntu 22.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum e1d787f10ee51d94732732811e4d2110f1b8e448e67fd47df8b53a2f7e56e3c8)

  • OpenSSL Dynamic Engine (SHA256 checksum 29a9c41379754ce098a025feadc026f2f75a8638981f5b95ed07007d5b3d8510)

  • JCE provider (SHA256 checksum 390d21e499ba181dc2774c3140433f6e60b49d9de3a892a89038c27e1aff157b)

  • CloudHSM CLI (SHA256 checksum cadadafaa9464f944e5c2446df92fb1777a9e1e5116cab1b359a8aa101cf7ae8)

Download version 5.16.1 software for Ubuntu 22.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 3b6a3d50b4a55c150f12308ee3914451897bc4cc4c8420accf1d2d706316fcce)

  • OpenSSL Dynamic Engine (SHA256 checksum c366a3c5faf4de32a6dedc4613234ba3d331b0abac3241bed7d25e0109a44f64)

  • JCE provider (SHA256 checksum 705416b47bc62781b5a6dfc78dd02dadb4f18f842b569c3e210b9535813b9e70)

  • CloudHSM CLI (SHA256 checksum 811b501615cf34665b70f103905094ca84ed7c126f72d91b040aacda99dbf22b)

Ubuntu 20.04 LTS

Download version 5.16.1 software for Ubuntu 20.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6a2c33c78ada33fb435bbf8939b7cde3efe968e9f03250083dc6024b7ebd45b8)

  • OpenSSL Dynamic Engine (SHA256 checksum 6ee178454e78d88e0ab92cd7c5b056d0c04cd6de192aea731d7ebcbd4c5ed761)

  • JCE provider (SHA256 checksum 1e61ccd8d2b37c64467051d26e8d8bd592465ecef04282d6f4a9491707ba059d)

  • CloudHSM CLI (SHA256 checksum 645693f2ede4fa0d7879eedaa41ae23120d902f24c9a637ba088f277e703cb96)

Windows Server 2025

Download version 5.16.1 software for Windows Server 2025 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 25beadaf28323412c60ed6695d89b6261d34da9cccf08869923b979854aa0329)

  • JCE provider (SHA256 checksum 65f487f22c0786b80d81b387f5f4c8a6c9395c8d31a020c91fc0105829b8ec2c)

  • CloudHSM CLI (SHA256 checksum d4dc9f5efd2b5e2eb07a59fb237f7f8dfd5476c859cdb9f91841354ce88783c4)

  • Key Storage Provider (KSP) (SHA256 checksum 80f70eb3ba22d34e49b5b5da3fa183c86c751bff46229ae16fb83a5fc69a4d0c)

Windows Server 2022

Download version 5.16.1 software for Windows Server 2022 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 25beadaf28323412c60ed6695d89b6261d34da9cccf08869923b979854aa0329)

  • JCE provider (SHA256 checksum 65f487f22c0786b80d81b387f5f4c8a6c9395c8d31a020c91fc0105829b8ec2c)

  • CloudHSM CLI (SHA256 checksum d4dc9f5efd2b5e2eb07a59fb237f7f8dfd5476c859cdb9f91841354ce88783c4)

  • Key Storage Provider (KSP) (SHA256 checksum 80f70eb3ba22d34e49b5b5da3fa183c86c751bff46229ae16fb83a5fc69a4d0c)

Windows Server 2019

Download version 5.16.1 software for Windows Server 2019 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 25beadaf28323412c60ed6695d89b6261d34da9cccf08869923b979854aa0329)

  • JCE provider (SHA256 checksum 65f487f22c0786b80d81b387f5f4c8a6c9395c8d31a020c91fc0105829b8ec2c)

  • CloudHSM CLI (SHA256 checksum d4dc9f5efd2b5e2eb07a59fb237f7f8dfd5476c859cdb9f91841354ce88783c4)

  • Key Storage Provider (KSP) (SHA256 checksum 80f70eb3ba22d34e49b5b5da3fa183c86c751bff46229ae16fb83a5fc69a4d0c)

Windows Server 2016

Download version 5.16.1 software for Windows Server 2016 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 25beadaf28323412c60ed6695d89b6261d34da9cccf08869923b979854aa0329)

  • JCE provider (SHA256 checksum 65f487f22c0786b80d81b387f5f4c8a6c9395c8d31a020c91fc0105829b8ec2c)

  • CloudHSM CLI (SHA256 checksum d4dc9f5efd2b5e2eb07a59fb237f7f8dfd5476c859cdb9f91841354ce88783c4)

  • Key Storage Provider (KSP) (SHA256 checksum 80f70eb3ba22d34e49b5b5da3fa183c86c751bff46229ae16fb83a5fc69a4d0c)

Client SDK 5.16.1 adds support for signing and verifying prehashed data in the CloudHSM CLI.

Platform support
  • SDK 5.16.1 is the last release to provide Ubuntu 20.04 LTS platform support. For more information, see the Ubuntu website.

CloudHSM CLI
JCE provider
  • Updated AES/CBC/Pkcs5Padding Encryption mode to automatically generate a random Initialization Vector (IV) when null IV is provided. Previously, null IV would result in an operation failure. Explicit IVs remain mandatory for decrypt operations.

Bug fixes/Improvements
  • Reduced latency for repeated digest update operations in JCE.

  • Updated the `generate key-reference` command to correctly name KSP key reference files based on their Attribute ID values when running on Windows Server. For more information, see Generating KSP key references (Windows).

Amazon Linux 2023

Download version 5.16.0 software for Amazon Linux 2023 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum d63271304f32f49838390a58d94a2140ae8a744ac64efcf0e6a65983c858d862)

  • OpenSSL Dynamic Engine (SHA256 checksum 25d78c1df82355601ed6887bb47d64a06380d001da15a070cfa89dce65417fb6)

  • JCE provider (SHA256 checksum fcd876813e5d114e2b042765ff98b256410e988a4e373ea1aae6f260aebdd554)

  • CloudHSM CLI (SHA256 checksum 7f1441eb08daa7ceab91161900d89974ee86e0a3c54d878a29e43db775bd04f5)

Download version 5.16.0 software for Amazon Linux 2023 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 0b42e4e89cddda10c5be5f295a52d7a541bba057a3a07d3d9b192cf9eb49c776)

  • OpenSSL Dynamic Engine (SHA256 checksum e8ee949d44b9f9ba64ed36eb7944acacbd1d76d7cf09d5492deae5928a9953e9)

  • JCE provider (SHA256 checksum 67a6fd8f7b5dfc60ec6d6d380c31035675373b542205ec7e5a687175191cd275)

  • CloudHSM CLI (SHA256 checksum 1e6c3053b19aded54045a3baa9fe2545f81a35332366cf2d77dca92ee888e654)

Amazon Linux 2

Download version 5.16.0 software for Amazon Linux 2 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 5a89ff9801f89f51e27e70869f2713cfe9bbd87d1198246cffaafe74aff9e809)

  • OpenSSL Dynamic Engine (SHA256 checksum 991b6288289d07972915aa0be6dfd6b3c33c1d6312bc304225715e30832e688f)

  • JCE provider (SHA256 checksum c5e673f79c2efd83195a288a5c8860c4bf74dba5bc8e422741dd5cc1be230fb3)

  • CloudHSM CLI (SHA256 checksum b9021b0b348c08f433e7cce247ab1710e2a79f33a82ac36e1d6a4672171028db)

Download version 5.16.0 software for Amazon Linux 2 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 97677a7f9759637b548205d31c9a08a3e7b27dfa5a38e9a4e8e2398ae9869a5a)

  • OpenSSL Dynamic Engine (SHA256 checksum dde369dc4efd9f59e5c9a5459a532ad5d273f87839fba6dd5dcde2c3a2b61517)

  • JCE provider (SHA256 checksum b7d96e7453e26ff07ccd9437b102f4c21857c79daa6315054728fc7ac66150bc)

  • CloudHSM CLI (SHA256 checksum c7386ac016b14ea8cb96a6ed655a67f46826cdb925bd87902277b5ce9b593d51)

RHEL 9 (9.2+)

Download version 5.16.0 software for RHEL 9 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 178d3e1ff0ec8cdc7f8c8be9aab772b4195602bb1c48dea692b628689be5ea3d)

  • OpenSSL Dynamic Engine (SHA256 checksum 0488ad66cd825fafee70d1a1ccb1c8045b089af7b7d6ccadbec75f535376048c)

  • JCE provider (SHA256 checksum cc9a60fa981a46c674de1e715d92ec1b8cd5c801394bfb3f0d101880589d4202)

  • CloudHSM CLI (SHA256 checksum cb7e3ce6704f015d5b9462f12e6ad5489366fb3e80f554a2bdf7f04e688be1a9)

Download version 5.16.0 software for RHEL 9 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 9567fb016b641821869919d4d6e9754ae08fd549381446640ff135a1e225b809)

  • OpenSSL Dynamic Engine (SHA256 checksum 8c46a9dd908e77a0d8412e7050621d0c570e091845480815c230e26d1917227b)

  • JCE provider (SHA256 checksum 78a7c714aedd068e5e2f12f5044a6ce1618e6dfacbcdd91b4a9b505842dcc6c9)

  • CloudHSM CLI (SHA256 checksum d2340ef4092ca6c1fa1ac8b484550508a5d9d8670e663bef6e595a07f8151be3)

RHEL 8 (8.3+)

Download version 5.16.0 software for RHEL 8 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 47bf628a4a2663b8e8c7207b43e5af1d05ed2247e85e1371773596c132c9a4ec)

  • OpenSSL Dynamic Engine (SHA256 checksum 49dd44243863121f7781e0f4ac556828c746d85db723864ccf16ea5fb042846a)

  • JCE provider (SHA256 checksum c5e8a6664e6a8e5338a98b3845bed029f5936b517e6043aeb65ad58c3364eed8)

  • CloudHSM CLI (SHA256 checksum 71f2cd6bd8892ccaea845bfe575cdf20016dd7176e5216b76290e499c822a2f2)

Ubuntu 24.04 LTS

Download version 5.16.0 software for Ubuntu 24.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum fd7e78050aba017b7dc859f0b1e6f354f56b22091cb262b328aad204064a2960)

  • OpenSSL Dynamic Engine (SHA256 checksum 9d2a9e8049caa12c8027ad2963fa30f22e1032d4025e39a4e2d5985073c283f5)

  • JCE provider (SHA256 checksum ae19c13f55e01538e989e8693aaf3a5d998c60f1ed71e721a34404a228947c20)

  • CloudHSM CLI (SHA256 checksum 7ebedb3e8c4b8e01cc1e5dfe32ae18c9542d9c2940c77bd71ee102093aaf1d1c)

Download version 5.16.0 software for Ubuntu 24.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum cfd9526cf495e81a2477b464ca3c124a89d07b1a366a14b39eeb27d6b5e2404b)

  • OpenSSL Dynamic Engine (SHA256 checksum 02a5cc2cd9442b7bf982bb3ae44c9b134758b46e68e46fe4729b4adf1320d75c)

  • JCE provider (SHA256 checksum 124d04f667a7222d624f528404a289405669f4e4a1983b8a7926758bf67e35ec)

  • CloudHSM CLI (SHA256 checksum b874556b34ff5f0d082ca19f62822cf97d6e7074ce3861d7577090f99cba0cbd)

Ubuntu 22.04 LTS

Download version 5.16.0 software for Ubuntu 22.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum e36d9bf900e195e417db261034d820cb935bec5135a0aa332d46019c70257cac)

  • OpenSSL Dynamic Engine (SHA256 checksum 2c39129a5acce96b8693ce8c4b4aa174d9c13bc8ea3c2652fa505b4e0a933842)

  • JCE provider (SHA256 checksum 03b70d834985a2500b73eecd831bff4f30389eb67460bf1d799466e59a9f9cfd)

  • CloudHSM CLI (SHA256 checksum 3fc4fc662188ebbd430d9b5e01a57774567b926f3478d0a455fee4968c47460d)

Download version 5.16.0 software for Ubuntu 22.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum c835d9bb604b5c47a702fd45267ffb9dfa37d68dd0734391f060835ea680a169)

  • OpenSSL Dynamic Engine (SHA256 checksum 943213a0f14b50fbdf3a90286e7f7ab219ab77750698f5062013873419484a04)

  • JCE provider (SHA256 checksum 0ecc3e65a3b94c2dd3913f44aba58764e5558a8bedd3b742a42e4769533f3734)

  • CloudHSM CLI (SHA256 checksum 8558328b224b850cf9e1b3c4f8773565a90e38ab43e2c9e90bc5b841f98898d2)

Ubuntu 20.04 LTS

Download version 5.16.0 software for Ubuntu 20.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 64a01e84d898aca3cd03f22022cf8dbbc806a1735a84df5f820ba5bfa3339b0e)

  • OpenSSL Dynamic Engine (SHA256 checksum 53a73cfc60c3fddd3ad9173bf6e602faf289f20935b3c469a137847148442954)

  • JCE provider (SHA256 checksum 09544cb8129af4d06a241e1fbc0b6e6c207e1a518e5cb202f7b6c9802507d1b8)

  • CloudHSM CLI (SHA256 checksum e1fdf1e014541f57d3ba4688bad88e7557e32ba974e020b4da76f85f1fc6aa29)

Windows Server 2025

Download version 5.16.0 software for Windows Server 2025 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6d3142d178127372de9ab40e7af5dc81fa7c627a18286dd521ad786d0947f17d)

  • JCE provider (SHA256 checksum 9f5c28583b5127b90e753dd7ce6d081bbe4810c0c30c424192704efa6ad1be34)

  • CloudHSM CLI (SHA256 checksum 22cfed533f528e0975f452af51d334baa1b5c143e722182dca107622e703b1ca)

  • Key Storage Provider (KSP) (SHA256 checksum 9045c4f3e81093c4b49b93f3ea3f5caf2a4e6980628e0db2d971c437dc203bfc)

Windows Server 2022

Download version 5.16.0 software for Windows Server 2022 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6d3142d178127372de9ab40e7af5dc81fa7c627a18286dd521ad786d0947f17d)

  • JCE provider (SHA256 checksum 9f5c28583b5127b90e753dd7ce6d081bbe4810c0c30c424192704efa6ad1be34)

  • CloudHSM CLI (SHA256 checksum 22cfed533f528e0975f452af51d334baa1b5c143e722182dca107622e703b1ca)

  • Key Storage Provider (KSP) (SHA256 checksum 9045c4f3e81093c4b49b93f3ea3f5caf2a4e6980628e0db2d971c437dc203bfc)

Windows Server 2019

Download version 5.16.0 software for Windows Server 2019 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6d3142d178127372de9ab40e7af5dc81fa7c627a18286dd521ad786d0947f17d)

  • JCE provider (SHA256 checksum 9f5c28583b5127b90e753dd7ce6d081bbe4810c0c30c424192704efa6ad1be34)

  • CloudHSM CLI (SHA256 checksum 22cfed533f528e0975f452af51d334baa1b5c143e722182dca107622e703b1ca)

  • Key Storage Provider (KSP) (SHA256 checksum 9045c4f3e81093c4b49b93f3ea3f5caf2a4e6980628e0db2d971c437dc203bfc)

Windows Server 2016

Download version 5.16.0 software for Windows Server 2016 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6d3142d178127372de9ab40e7af5dc81fa7c627a18286dd521ad786d0947f17d)

  • JCE provider (SHA256 checksum 9f5c28583b5127b90e753dd7ce6d081bbe4810c0c30c424192704efa6ad1be34)

  • CloudHSM CLI (SHA256 checksum 22cfed533f528e0975f452af51d334baa1b5c143e722182dca107622e703b1ca)

  • Key Storage Provider (KSP) (SHA256 checksum 9045c4f3e81093c4b49b93f3ea3f5caf2a4e6980628e0db2d971c437dc203bfc)

Client SDK 5.16 adds ECDH with X963 KDF support on hsm2m.medium cluster type for JCE provider and PKCS #11 library. Client SDK 5.16 also adds support for generating KSP key reference files on Windows Server with CloudHSM CLI.

CloudHSM CLI
JCE provider
PKCS #11 library
Bug fixes/Improvements
  • Fixed a bug where session keys were not properly cleaned during disconnection.

  • Fixed an issue where successful mTLS logout operations on hsm2m.medium incorrectly returned an error response.

  • Fixed an issue with connection failure during the windows startup.

  • Fixed an issue where SDK info tools displayed incorrect output on Ubuntu systems.

  • Fixed an issue that previously allowed ECDSA with weaker hashes in FIPS mode.

Amazon Linux 2023

Download version 5.15.0 software for Amazon Linux 2023 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 41ef3178811df1dbb03b2cbac83fe0f4768bdc9b17005c409f1c0229f93ef11c)

  • OpenSSL Dynamic Engine (SHA256 checksum afa1f9f8bd99f54866dea1b8928c00b951a6e492f5f36d0d6c7c38fff341d609)

  • JCE provider (SHA256 checksum 6ea775e05570ef3497a4df5c35a6ec1c682aea73c48e7fecec3e541af995759e)

  • CloudHSM CLI (SHA256 checksum 78c10bb213dd14fcfc5836e358de6aedac61db05125fd61137b0082214fdecbe)

Download version 5.15.0 software for Amazon Linux 2023 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum cd0617d29b6d64c00c8e14fd9a92f604e14acda4746f4f0b86b9de42367192fb)

  • OpenSSL Dynamic Engine (SHA256 checksum bc9acfdd04eb1246eb3d5b0a8f3736ec017c0d1699d5395f85868d4a1722cd83)

  • JCE provider (SHA256 checksum 96d05301486206577b7be05aac561649167b57272c9c06ff839fd8ff2b5d96d5)

  • CloudHSM CLI (SHA256 checksum b870eadb27736a2cde98022d57e9704c67ae15878cf0b910738859cdabaa35a2)

Amazon Linux 2

Download version 5.15.0 software for Amazon Linux 2 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum c70ae4f0181a8187c9380481c51c1d03e12236dd86863ec818ed3f210b294c8e)

  • OpenSSL Dynamic Engine (SHA256 checksum 08e9fd1dd80efa637f9a1727bb0de205ba124a3776b2e8bc21008ee458063a42)

  • JCE provider (SHA256 checksum 7932ed060e72c53b2556f30694b0ffe5342b244b6628c7a9dc03966aa49c8fe6)

  • CloudHSM CLI (SHA256 checksum 0a939e4d5d0a2ff308c7a1d9e73ebc865e426214d556bde1bd29dbe807fbb583)

Download version 5.15.0 software for Amazon Linux 2 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum bcf907a8fb4722b09c54b8e5785fe2b8cffcedd6ee3fdda2d21879a012138077)

  • OpenSSL Dynamic Engine (SHA256 checksum 8f70edc3a6a4a1bf0264c6567b1dda1ac69055f206753f88eeadbb8bf3bf9f38)

  • JCE provider (SHA256 checksum 75dd67736bb08fe7e46e113af10803a255ba8edee3016ca963c1ee94fe59d43b)

  • CloudHSM CLI (SHA256 checksum 1c2ecf90c955281d99bcd8d1956d63debb15bbc8419744c83f88821ef8b78aee)

RHEL 9 (9.2+)

Download version 5.15.0 software for RHEL 9 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 65bd0b815eebc806674a7bf7c54e9f884595881547f5fffd08ff6a38aabdccbe)

  • OpenSSL Dynamic Engine (SHA256 checksum f2af9f5882ab2e5a11defecc660f8af5c4d9d6e2e2b89873e6833fc2976f44ac)

  • JCE provider (SHA256 checksum 5124bace5d1544775c891f13a0e309b30dd73699116c46ecc9a77bba5f9cf633)

  • CloudHSM CLI (SHA256 checksum 1eec31fb2c0ab3c2839d9bdb37874cf8dbc74a383279068fce9e8613966d06e0)

Download version 5.15.0 software for RHEL 9 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum f498697519afa04b6b0362a4388a6a38e2cb6813b781d6ce3d97a7de89c5cbfe)

  • OpenSSL Dynamic Engine (SHA256 checksum 5410da63108a1b209e567e9bccf8bd7e4035af88b0d58b9d78b10917be1b40c1)

  • JCE provider (SHA256 checksum b46f233e6994d2c0ed505dc5c717ee3009daaeb2063d260aa78e06273770bffa)

  • CloudHSM CLI (SHA256 checksum e9f93eaa58db2f7ea1174164ef96ab219700933d353243c3c6ab1aebac5ccffe)

RHEL 8 (8.3+)

Download version 5.15.0 software for RHEL 8 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 87131e179d0e60ade302ec07b22803cfb39294bf060b786c41f154d95791ac94)

  • OpenSSL Dynamic Engine (SHA256 checksum f412a2f5cd761db5940288bb252ce060d44735c6b436bb6d4fa7d3687a44a026)

  • JCE provider (SHA256 checksum d0844f55c08f9ff9c393138a9041efe1b59dc3dce20c0b2c23406efe6acc43db)

  • CloudHSM CLI (SHA256 checksum 9fd8033e478ce6d7d640c063c4f007359cb04c19d519826a745ad0885f96a0f8)

Ubuntu 24.04 LTS

Download version 5.15.0 software for Ubuntu 24.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum ca5f2f80ae921cfebdc5c8bc35c39d2b19cfabfd5981932409eaf2e7c00a9097)

  • OpenSSL Dynamic Engine (SHA256 checksum e44cd7b678a421957c84e4fc0f70280360fd4e1e66f4cabdd1b20b955ee5fcca)

  • JCE provider (SHA256 checksum bc6382f12769c3d87c34522d0d616b7a8c108574c003814e1300938c386655ac)

  • CloudHSM CLI (SHA256 checksum f786be86c204680e670f7817376ff376733ebd96b51c31e9c98213078596637f)

Download version 5.15.0 software for Ubuntu 24.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 1ecf057d67137c0e9e1bb0dda57d581690c647b0360c3a617a8dc668919d08de)

  • OpenSSL Dynamic Engine (SHA256 checksum 4f3d23e6b798f88be587108d8e6a225d796a3d080aef61ea384eb74a1270612a)

  • JCE provider (SHA256 checksum b9fd16bdcc1fcf59fde0d3e0debee500b0b7edfdff69209e84d14393097fe9d2)

  • CloudHSM CLI (SHA256 checksum a95922d9b44e64a64723db0c21ac89566515a5a6c87de990af4a9e1f40c7424f)

Ubuntu 22.04 LTS

Download version 5.15.0 software for Ubuntu 22.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 966be12eb32de813ca07e766abf7b5616c0d2e105e9296d920aadaca10e5afdf)

  • OpenSSL Dynamic Engine (SHA256 checksum f2840151d87b7f9cbff68993c25397afd48a16f054abf0f2fd4624662d3087d6)

  • JCE provider (SHA256 checksum 01aebdda05640e50a82cae04c5cb6d33ab909dadd917bd834957d4f75ad8c577)

  • CloudHSM CLI (SHA256 checksum 2e5eba9409abc429828505779c512cd2424719766c0e488f50aee288966cf61d)

Download version 5.15.0 software for Ubuntu 22.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 614f74f101c9c64fff515128c5a59fa23de5047494fe248e8aabdab441092b3e)

  • OpenSSL Dynamic Engine (SHA256 checksum c15d6db77b76bce690749b73b947567eb5f2d76669887843116d0ce56c1f8ea7)

  • JCE provider (SHA256 checksum bca8511d5c0a173b0fef326016ce5091b6e6829fa2b3cb45ed5621290ae3e42a)

  • CloudHSM CLI (SHA256 checksum 2f5b673148b682d7e34619c51b5e8799abe7dc7fd4f046158a0d05320ba24dc1)

Ubuntu 20.04 LTS

Download version 5.15.0 software for Ubuntu 20.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 86c8394b5ddff91a71194fb87c327efde36baa2380e559c04f9d543a6e74d61b)

  • OpenSSL Dynamic Engine (SHA256 checksum 0a4227389fea61e6e7ac7cfa715eb341f7a4eeae9ed10e4c96da2c0dd4a18f9e)

  • JCE provider (SHA256 checksum 65b2d926ff9dfbe6c7864bc3a41b3da2383bc731dd199bcef8805a0543fbe612)

  • CloudHSM CLI (SHA256 checksum 09c2e55bcf72f9e530717950d8c5fdfd48574ae6ccb09a049526ca5b2a3b8aa9)

Windows Server 2025

Download version 5.15.0 software for Windows Server 2025 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum a903b63fe286f15bf669c0555b1fa4d86b33592ed05af0809acac28c0d3ace16)

  • JCE provider (SHA256 checksum fdef6251f06d77d51fddbc2184d3eec87ddec4fe35b3ac620343eb66c95ddf64)

  • CloudHSM CLI (SHA256 checksum 6cc9205fe1fc514ddd9774f824e512940d6b1bc4cc0e251265bc46ab99746c28)

  • Key Storage Provider (KSP) (SHA256 checksum 52ed9b08cd0ce100b8dcd3d8e8f411b6201f9f1b27872b19d1136c0bf36a29b8)

Windows Server 2022

Download version 5.15.0 software for Windows Server 2022 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum a903b63fe286f15bf669c0555b1fa4d86b33592ed05af0809acac28c0d3ace16)

  • JCE provider (SHA256 checksum fdef6251f06d77d51fddbc2184d3eec87ddec4fe35b3ac620343eb66c95ddf64)

  • CloudHSM CLI (SHA256 checksum 6cc9205fe1fc514ddd9774f824e512940d6b1bc4cc0e251265bc46ab99746c28)

  • Key Storage Provider (KSP) (SHA256 checksum 52ed9b08cd0ce100b8dcd3d8e8f411b6201f9f1b27872b19d1136c0bf36a29b8)

Windows Server 2019

Download version 5.15.0 software for Windows Server 2019 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum a903b63fe286f15bf669c0555b1fa4d86b33592ed05af0809acac28c0d3ace16)

  • JCE provider (SHA256 checksum fdef6251f06d77d51fddbc2184d3eec87ddec4fe35b3ac620343eb66c95ddf64)

  • CloudHSM CLI (SHA256 checksum 6cc9205fe1fc514ddd9774f824e512940d6b1bc4cc0e251265bc46ab99746c28)

  • Key Storage Provider (KSP) (SHA256 checksum 52ed9b08cd0ce100b8dcd3d8e8f411b6201f9f1b27872b19d1136c0bf36a29b8)

Windows Server 2016

Download version 5.15.0 software for Windows Server 2016 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum a903b63fe286f15bf669c0555b1fa4d86b33592ed05af0809acac28c0d3ace16)

  • JCE provider (SHA256 checksum fdef6251f06d77d51fddbc2184d3eec87ddec4fe35b3ac620343eb66c95ddf64)

  • CloudHSM CLI (SHA256 checksum 6cc9205fe1fc514ddd9774f824e512940d6b1bc4cc0e251265bc46ab99746c28)

  • Key Storage Provider (KSP) (SHA256 checksum 52ed9b08cd0ce100b8dcd3d8e8f411b6201f9f1b27872b19d1136c0bf36a29b8)

Client SDK 5.15 adds support for replicating a user across cloned clusters with CloudHSM CLI. Client SDK 5.15 also adds installation packages for PKCS #11 library, JCE provider, CloudHSM CLI, and Key Storage Provider (KSP) for Windows Server 2025.

Platform support
  • Added support for Windows Server 2025 for PKCS #11 library, JCE provider, CloudHSM CLI, and Key Storage Provider (KSP).

CloudHSM CLI
  • Added the following command:

    • Replicate a user with CloudHSM CLI

Amazon Linux 2023

Download version 5.14.0 software for Amazon Linux 2023 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 05e7a3882166c694a7a09bc735f08f91c8145a4215176665eacacdf3e509abe8)

  • OpenSSL Dynamic Engine (SHA256 checksum f4dd9966988418e100c276dc0d521f91afdfc0e6c008dbf8eda446ebaca83c14)

  • JCE provider (SHA256 checksum c4dee5c1173f6a1c7683aedb58e61d329c36933435c416f288d94bc9a68a6b31)

  • CloudHSM CLI (SHA256 checksum 1fad069fde305450254287e43750d597db9af0cb8fd168300cd5eaed9e2af33a)

Download version 5.14.0 software for Amazon Linux 2023 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 9f34163d02bce26c1280e589310cda891d27995c50cec0a7fe083100ecff2b69)

  • OpenSSL Dynamic Engine (SHA256 checksum 7444a4daad6e4715c82d6c39a7b03a07ee0201a13fe0f98da96acbf9d24abf6c)

  • JCE provider (SHA256 checksum 3393fe3a0f5c3a9c92106d74b7de074c818e095f97d2cfd600dbd47779b90b37)

  • CloudHSM CLI (SHA256 checksum d9a2edce48c5f6646d5a351cb431712f2d2fc62d21f8318e7bb1ce579819d7f4)

Amazon Linux 2

Download version 5.14.0 software for Amazon Linux 2 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 9c47b90bfa0ad51627cdb0dd8f148a56090fbdeb2490f1ab4009170c7b9c1120)

  • OpenSSL Dynamic Engine (SHA256 checksum 215f9768331565085a317585b3dbe0514b251fdc428c96ed32491c4abb9fea56)

  • JCE provider (SHA256 checksum a802f941e95fcbf0ef37775fc096c0d6ae4c916fa08330a9d56defc5f99ff2b7)

  • CloudHSM CLI (SHA256 checksum ac10f23dd81264b1d10a0760f62b5006d2b2b66bf1c6378248ca9326afb65a83)

Download version 5.14.0 software for Amazon Linux 2 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum f2d1550f043c655ef5d51e2ca14a0416886d99902e0702bd7f30f93b2c563d4d)

  • OpenSSL Dynamic Engine (SHA256 checksum 2c8e2c81af53ba3646d1f947894d84b9b54780bbca79b58f354125e4ac9427c0)

  • JCE provider (SHA256 checksum 3f9c881056e6905d46358585db72143b59971958a708fa4ac75cb53994487213)

  • CloudHSM CLI (SHA256 checksum 6d5985e44c9852409dd3d342239fbbf7d0f9ad43d445e0980153c9b9eafe2b6f)

RHEL 9 (9.2+)

Download version 5.14.0 software for RHEL 9 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum c4812210421ff2fa5dac8477a2e6b10552aabd88b1f03d717e044e7293823158)

  • OpenSSL Dynamic Engine (SHA256 checksum 3f6aeaa6ae1faae7d8bba1596f358cad1eec9e562cf08aaab9ded92cabe94719)

  • JCE provider (SHA256 checksum bd8f120b08f738ad4d1534b0e32aad903758d5e75d3aba7cb9ff6a77dec533db)

  • CloudHSM CLI (SHA256 checksum 84f13a9babd767edf90dabb0b14034ec5b2208898123a13966dd6b8519961c27)

Download version 5.14.0 software for RHEL 9 on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 3faa1de563aa9773939cab7b39907dcb7b981ed7225019f9070a9dd52db7ae70)

  • OpenSSL Dynamic Engine (SHA256 checksum 13b41ac47ef7ee7bf78f585b8347ca4da9ebc296e4fc1e6a0c2ff5b333354ca6)

  • JCE provider (SHA256 checksum 06803655ebe54d59c180bb17ac6fe56337bdd58ad0f6fe87c50ff8df32f70258)

  • CloudHSM CLI (SHA256 checksum e6b4e9688d0db9d72bbee3450fe19736d640c9931adbd4f4ef73cb7ac2a08cf4)

RHEL 8 (8.3+)

Download version 5.14.0 software for RHEL 8 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum e400aeea6dbf7721f97e71c643a0db4f5f1094fb197fc46dc0ab293de9d16f2d)

  • OpenSSL Dynamic Engine (SHA256 checksum bfcc27d251e62f9eba0fd508e7d08dc62126642d4cdd0b5566183957768b8c54)

  • JCE provider (SHA256 checksum b5500031b572c918a8df4a0347e01c8ea00a7366b865b310bd92427fa1ed53e3)

  • CloudHSM CLI (SHA256 checksum 000712d0a691efc64a6c5d54bfeb1ab48b315ebb5dd6926b0502e326bf700291)

Ubuntu 24.04 LTS

Download version 5.14.0 software for Ubuntu 24.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum bbec70a198a4b173620b4018accc297ce6a6a80d372706e0101997d6bca35bca)

  • OpenSSL Dynamic Engine (SHA256 checksum fcb77f75bd465b22401a09a20c410985833340295101263b7171cdcc4ac9f980)

  • JCE provider (SHA256 checksum e1fa16aae2f6095c89a8bf392ef2cb9ca4db8853c858904ff90abf4bb491d74b)

  • CloudHSM CLI (SHA256 checksum af32e0ac1c5f8c7f8cb40d255abe7c63ce9d981293187a3fb452562fa05756f4)

Download version 5.14.0 software for Ubuntu 24.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 1232318b084347889f92136536537ca519373683ce39bcec20f6ac3fa2f42d7c)

  • OpenSSL Dynamic Engine (SHA256 checksum 1745ee3a33d8e6ea72644e903c55c6a206204cf0a8bea200bc4a7b15736ed801)

  • JCE provider (SHA256 checksum 7a44acabbc90c996594ed53661937f9242850823347f7c386f02fc041a97471a)

  • CloudHSM CLI (SHA256 checksum e6778bd12c55fd152b50033833531fe569472f4f2bd9927a345eb126e8305739)

Ubuntu 22.04 LTS

Download version 5.14.0 software for Ubuntu 22.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum 6b4b1620e9a85267950633b171dd188b7ac7094e371e188fabc1bef7a911a16f)

  • OpenSSL Dynamic Engine (SHA256 checksum fee5f0a65fab0f46ad58689af5dc510721581f31364d3be5cbbf79f5d9a60db8)

  • JCE provider (SHA256 checksum 5883a3d15e160d65f8e26f185e1ee30f68becad5f6fcd16abc1c4586689800b5)

  • CloudHSM CLI (SHA256 checksum 7b1a8cd2962f4be7325154c080dabfb820beac5629e272c3a3ebc0e6cab11d27)

Download version 5.14.0 software for Ubuntu 22.04 LTS on ARM64 architecture:

  • PKCS #11 library (SHA256 checksum 8680f63fd74272ea0e4d4c32dfb96b3eb9b60e03483c202d4e9b65ee101a178f)

  • OpenSSL Dynamic Engine (SHA256 checksum c757304e8fc5f38be3bab7ac6d37a35dcb56d31e62f7194da62b3a176593d1d8)

  • JCE provider (SHA256 checksum a78ee59341da56af315d126ec7ed9f0dafe6e99649f659db2436be3863cb035b)

  • CloudHSM CLI (SHA256 checksum 18931bff869a0bd54846b3296d870fa19beba5652f979352be8fba6307e6d1aa)

Ubuntu 20.04 LTS

Download version 5.14.0 software for Ubuntu 20.04 LTS on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum f1461c16b135ebcc17deec46aab88bd113ea122b8942fc188d4f05cd03e919a8)

  • OpenSSL Dynamic Engine (SHA256 checksum 89211a7a7ed50eda2dc385c31ea76f1fbabd389ca691204873531d983c3eb0f7)

  • JCE provider (SHA256 checksum f098c32d61a53b073459a75d88b68e377a9b16335874fae060cb10df0da00df0)

  • CloudHSM CLI (SHA256 checksum ff91fb930717c917344af2ba344dc6e02bd5abc004dcb6147e9412b67e2aa7ab)

Windows Server 2022

Download version 5.14.0 software for Windows Server 2022 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum ee5a8e8e85fff7acd0bbafa23740e3981f7dc52e708972b600c2b26603786838)

  • JCE provider (SHA256 checksum 2ae0274f09f66981c03fd1e3c264e896ba7cd211168ea31369335db1b3ea2e77)

  • CloudHSM CLI (SHA256 checksum 3938654f88ce010042e48909e23991e178e411e2bd9e3c9ec25fcb8157c0cd55)

  • Key Storage Provider (KSP) (SHA256 checksum b026e4d8c11e9ff6f22a7b9e10b8bb29e7572665f0d7978a3cef7d2354b7693f)

Windows Server 2019

Download version 5.14.0 software for Windows Server 2019 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum ee5a8e8e85fff7acd0bbafa23740e3981f7dc52e708972b600c2b26603786838)

  • JCE provider (SHA256 checksum 2ae0274f09f66981c03fd1e3c264e896ba7cd211168ea31369335db1b3ea2e77)

  • CloudHSM CLI (SHA256 checksum 3938654f88ce010042e48909e23991e178e411e2bd9e3c9ec25fcb8157c0cd55)

  • Key Storage Provider (KSP) (SHA256 checksum b026e4d8c11e9ff6f22a7b9e10b8bb29e7572665f0d7978a3cef7d2354b7693f)

Windows Server 2016

Download version 5.14.0 software for Windows Server 2016 on x86_64 architecture:

  • PKCS #11 library (SHA256 checksum ee5a8e8e85fff7acd0bbafa23740e3981f7dc52e708972b600c2b26603786838)

  • JCE provider (SHA256 checksum 2ae0274f09f66981c03fd1e3c264e896ba7cd211168ea31369335db1b3ea2e77)

  • CloudHSM CLI (SHA256 checksum 3938654f88ce010042e48909e23991e178e411e2bd9e3c9ec25fcb8157c0cd55)

  • Key Storage Provider (KSP) (SHA256 checksum b026e4d8c11e9ff6f22a7b9e10b8bb29e7572665f0d7978a3cef7d2354b7693f)

Client SDK 5.14 adds support for quorum controlled key usage and key management operations using CloudHSM CLI. Client SDK 5.14 also adds support for Key storage provider (KSP) for AWS CloudHSM Client SDK 5 for windows platforms. Additionally, Client SDK 5.14 adds installation packages for PKCS #11 library, JCE provider, CloudHSM CLI, and Key Storage Provider (KSP) for Windows Server 2022.

Platform support
  • Added support for Windows Server 2022 for PKCS #11 library, JCE provider, CloudHSM CLI, and Key Storage Provider (KSP).

CloudHSM CLI
  • Added support for quorum controlled key usage and key management operations.

Key Storage Provider (KSP)

Client SDK 5.13 adds support for configuring mutual TLS on hsm2m.medium cluster types. For information on using mutual TLS with CloudHSM, see Set up mutual TLS between client and AWS CloudHSM (recommended). Client SDK 5.13 also adds installation packages for Ubuntu 24.04 LTS.

Platform support
  • Added support for Ubuntu 24.04 LTS on x86_64 and ARM64 architectures for all SDKs.

CloudHSM CLI
Bug fixes/Improvements
  • Fixed an issue to decrease the time required for the client to detect unhealthy HSM connections, which helps prevent connection drop errors during lambda warm starts.

Client SDK 5.12.0 adds ARM support to several platforms and performance improvements for all SDKs. New features have been added to the CloudHSM CLI and JCE provider.

Platform support
  • Added support for Amazon Linux 2023 on ARM64 architecture for all SDKs.

  • Added support for Red Hat Enterprise Linux 9 (9.2+) on ARM64 architecture for all SDKs.

  • Added support for Ubuntu 22.04 LTS on ARM64 architecture for all SDKs.

CloudHSM CLI
JCE provider
  • Added KeyReferenceSpec for retrieving keys using KeyStoreWithAttributes.

  • Added getKeys for retrieving multiple keys at once using KeyStoreWithAttributes.

Performance improvements
  • Performance improvements for the AES CBC NoPadding operation for all SDKs.

Client SDK 5.11.0 adds new features, improves stability, and includes bug fixes for all SDKs.

Platform support
  • Added support for Amazon Linux 2023 and RHEL 9 (9.2+) for all SDKs.

  • Removed support for Ubuntu 18.04 LTS due to its recent end of life.

  • Removed support for Amazon Linux due to its recent end of life.

OpenSSL Dynamic Engine
  • The AWS CloudHSM OpenSSL Dynamic Engine is now supported on platforms that come installed with an OpenSSL library version of 3.x. This includes Amazon Linux 2023, RHEL 9 (9.2+), and Ubuntu 22.04.

JCE
  • Added support for JDK 17 and JDK 21.

  • Added support for AES keys to be used for HMAC operations.

  • Added the new key attribute ID.

  • Introduced a new DataExceptionCause variant for key exhaustion: DataExceptionCause.KEY_EXHAUSTED.

Bug fixes/Improvements

Client SDK 5.10.0 improves stability and includes bug fixes for all SDKs.

CloudHSM CLI
  • Added new commands that allow customers to manage keys using CloudHSM CLI, including:

    • Create symmetric keys and asymmetric key pairs

    • Share and unshare keys

    • List and filter keys using key attributes

    • Set key attributes

    • Generate key reference files

    • Delete keys

  • Improved error logging.

  • Added support for multi-line unicode commands in interactive mode.

Bug fixes/Improvements
  • Improved performance for importing, unwrapping, deriving, and creating sessions keys for all SDKs.

  • Fixed a bug in the JCE Provider that prevented temp files to be removed on exit.

  • Fixed a bug that caused a connection error under certain conditions after HSMs in the cluster are replaced.

  • Modified JCE getVersion output format to handle large minor version numbers and include patch number.

Platform support
  • Added support for Ubuntu 22.04 with JCE, PKCS #11, and CloudHSM CLI (support for OpenSSL Dynamic Engine is not yet available).

Client SDK 5.9.0 improves stability and includes bug fixes for all SDKs. An optimization has been made for all SDKs to inform applications of operation failure immediately when an HSM is determined unavailable. This release includes performance enhancements for JCE.

JCE provider
  • Enhanced performance

  • Fixed a known issue for session pool exhaustion