기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.

# Linux에서 AWS CloudHSM 클라이언트 SDK 3 업그레이드
<a name="client-upgrade"></a>

****  
 SDK 버전 5.8.0 이하에 대한 지원이 종료되었습니다. 2025년 3월 31일 이후에는 SDK 버전 3.4.4 이하에 대한 설명서를 더 이상 사용할 수 없습니다.

 AWS CloudHSM Client SDK 3.1 이상에서는 업그레이드하려면 클라이언트 데몬 버전과 설치하는 구성 요소가 일치해야 합니다. 모든 Linux 기반 시스템의 경우 단일 명령을 사용하여 동일한 버전의 PKCS \#11 라이브러리, Java 암호화 확장(JCE) 공급자 또는 OpenSSL Dynamic Engine으로 클라이언트 대몬(daemon)을 일괄 업그레이드해야 합니다. CNG 및 KSP 공급자의 바이너리가 이미 클라이언트 대몬(daemon) 패키지에 포함되어 있으므로 이 요구 사항은 Windows 기반 시스템에는 적용되지 않습니다.

## 클라이언트 대몬(daemon) 버전을 확인하려면
<a name="check-client-version"></a>
+ Red Hat 기반 Linux 시스템(Amazon Linux 및 CentOS 포함)에서는 다음 명령을 사용합니다.

  ```
  rpm -qa | grep ^cloudhsm
  ```
+ Debian 기반 Linux 시스템에서는 다음 명령을 사용합니다.

  ```
  apt list --installed | grep ^cloudhsm
  ```
+ Windows 시스템에서 다음 명령을 사용합니다.

  ```
  wmic product get name,version
  ```

**Topics**
+ [사전 조건](#client-upgrade-prerequisites)
+ [1단계: 클라이언트 대몬(daemon) 중지](#client-stop)
+ [2단계: 클라이언트 SDK 업그레이드](#upgrade-commands)
+ [3단계: 클라이언트 대몬(daemon) 시작](#client-start)

## 사전 조건
<a name="client-upgrade-prerequisites"></a>

최신 버전의 AWS CloudHSM 클라이언트 데몬을 다운로드하고 구성 요소를 선택합니다.

**참고**  
모든 구성 요소를 설치할 필요는 없습니다. 설치한 모든 구성 요소에 대해 클라이언트 대몬(daemon) 버전과 일치하도록 해당 구성 요소를 업그레이드해야 합니다.

### 최신 리눅스 클라이언트 대몬(daemon)
<a name="download-client"></a>

------
#### [ Amazon Linux ]

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-latest.el6.x86_64.rpm
```

------
#### [ Amazon Linux 2 ]

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
```

------
#### [ CentOS 7 ]

```
sudo yum install wget
```

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
```

------
#### [ CentOS 8 ]

```
sudo yum install wget
```

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
```

------
#### [ RHEL 7 ]

```
sudo yum install wget
```

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
```

------
#### [ RHEL 8 ]

```
sudo yum install wget
```

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
```

------
#### [ Ubuntu 16.04 LTS ]

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client_latest_amd64.deb
```

------
#### [ Ubuntu 18.04 LTS ]

```
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client_latest_u18.04_amd64.deb
```

------

### 최신 PKCS \#11 라이브러리
<a name="download-pkcs11"></a>

------
#### [ Amazon Linux ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-pkcs11-latest.el6.x86_64.rpm
```

------
#### [ Amazon Linux 2 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
```

------
#### [ CentOS 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
```

------
#### [ CentOS 8 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm
```

------
#### [ RHEL 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
```

------
#### [ RHEL 8 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-pkcs11-latest.el8.x86_64.rpm
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-pkcs11_latest_amd64.deb
```

------
#### [ Ubuntu 18.04 LTS ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-pkcs11_latest_u18.04_amd64.deb
```

------

### 최신 OpenSSL Dynamic Engine
<a name="download-openssl"></a>

------
#### [ Amazon Linux ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm
```

------
#### [ Amazon Linux 2 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
```

------
#### [ CentOS 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
```

------
#### [ RHEL 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-dyn_latest_amd64.deb
```

------

### 최신 JCE 공급자
<a name="download-java"></a>

------
#### [ Amazon Linux ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-jce-latest.el6.x86_64.rpm
```

------
#### [ Amazon Linux 2 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
```

------
#### [ CentOS 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
```

------
#### [ CentOS 8 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm
```

------
#### [ RHEL 7 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-jce-latest.el7.x86_64.rpm
```

------
#### [ RHEL 8 ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-jce-latest.el8.x86_64.rpm
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-jce_latest_amd64.deb
```

------
#### [ Ubuntu 18.04 LTS ]

```
$ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client-jce_latest_u18.04_amd64.deb
```

------

## 1단계: 클라이언트 대몬(daemon) 중지
<a name="client-stop"></a>

다음 명령을 사용하여 클라이언트 대몬(daemon)을 중지합니다.

------
#### [ Amazon Linux ]

```
$ sudo stop cloudhsm-client
```

------
#### [ Amazon Linux 2 ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ CentOS 7 ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ CentOS 8 ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ RHEL 7 ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ RHEL 8 ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ sudo service cloudhsm-client stop
```

------
#### [ Ubuntu 18.04 LTS ]

```
$ sudo service cloudhsm-client stop
```

------

## 2단계: 클라이언트 SDK 업그레이드
<a name="upgrade-commands"></a>

다음 명령은 클라이언트 대몬(daemon) 및 구성 요소를 업그레이드하는 데 필요한 구문을 보여줍니다. 명령을 실행하기 전에 업그레이드하지 않으려는 구성 요소를 제거합니다.

------
#### [ Amazon Linux ]

```
$ sudo yum install ./cloudhsm-client-latest.el6.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el6.x86_64.rpm>}} \
              {{<./cloudhsm-client-dyn-latest.el6.x86_64.rpm>}} \
              {{<./cloudhsm-client-jce-latest.el6.x86_64.rpm>}}
```

------
#### [ Amazon Linux 2 ]

```
$ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-jce-latest.el7.x86_64.rpm>}}
```

------
#### [ CentOS 7 ]

```
$ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-jce-latest.el7.x86_64.rpm>}}
```

------
#### [ CentOS 8 ]

```
$ sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm>}} \              
              {{<./cloudhsm-client-jce-latest.el8.x86_64.rpm>}}
```

------
#### [ RHEL 7 ]

```
$ sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-dyn-latest.el7.x86_64.rpm>}} \
              {{<./cloudhsm-client-jce-latest.el7.x86_64.rpm>}}
```

------
#### [ RHEL 8 ]

```
$ sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm \
              {{<./cloudhsm-client-pkcs11-latest.el8.x86_64.rpm>}} \
              {{<./cloudhsm-client-jce-latest.el8.x86_64.rpm>}}
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ sudo apt install ./cloudhsm-client_latest_amd64.deb \
              {{<cloudhsm-client-pkcs11_latest_amd64.deb>}} \
              {{<cloudhsm-client-dyn_latest_amd64.deb>}} \
              {{<cloudhsm-client-jce_latest_amd64.deb>}}
```

------
#### [ Ubuntu 18.04 LTS ]

```
$ sudo apt install ./cloudhsm-client_latest_u18.04_amd64.deb \
              {{<cloudhsm-client-pkcs11_latest_amd64.deb>}} \
              {{<cloudhsm-client-jce_latest_amd64.deb>}}
```

------

## 3단계: 클라이언트 대몬(daemon) 시작
<a name="client-start"></a>

다음 명령을 사용하여 클라이언트 대몬(daemon)을 시작합니다.

------
#### [ Amazon Linux ]

```
$ sudo start cloudhsm-client
```

------
#### [ Amazon Linux 2 ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ CentOS 7 ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ CentOS 8 ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ RHEL 7 ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ RHEL 8 ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ Ubuntu 16.04 LTS ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ Ubuntu 18.04 LTS ]

```
$ sudo systemctl start cloudhsm-client
```

------
#### [ Ubuntu 20.04 LTS ]

```
$ sudo systemctl start cloudhsm-client
```

------