Configure SafeNet Luna SA HSM

This section describes the installation and upgrade procedures for the SafeNet Luna SA Hardware Security Module (HSM) client on the
Layer7 API Gateway
. For information on the currently supported Luna HSM client versions, refer to the Requirements and Compatibility page.
Configurations described here apply to specific combinations of Gateway 10.0 releases and Luna HSM client versions. Luna HSM users are encouraged to consult Luna documentation or support if they have questions regarding the compatibility between the HSM client version and the actual Luna HSM hardware version or model.
All configuration scenarios assume that the Luna HSM client software on the Gateway machine must already have a partition that assigned to it in the Luna HSM.
Beginning with Gateway version 10.0 CR 3, the Layer7 API Gateway supports the Luna SA Network HSM v10.2 client. Luna HSM users planning to upgrade to 10.0 CR 3. are REQUIRED to upgrade their existing Luna HSM client to v10.2. Moving forward, the Luna HSM v5.4.1 client will
no longer be supported
 by Gateway version 10.0 CR 3 or higher.
Beginning with Gateway version 10.0, the Layer7 API Gateway supports the Luna SA Network HSM v7.2 client. Although Thales (formerly Gemalto) has announced that it will be ending its sale of v5.4.1 in early 2020, CA-Broadcom will continue to provide best-of-ability support for customers who plan to continue with v5.4.1 of the client. Luna customers should be prepared for v7.2 to become the standard version moving forward.
If you're looking to...
  • Install version 5.4.1 of the Luna SA HSM client from scratch, go to this page.
  • Install version 7.2 of the Luna SA HSM client from scratch, go to this page.
  • Upgrade to version 7.2 from a previous version of the client (e.g., version 5.4.1), go to this page.
  • Available as of Gateway version 10.0 CR 3: Upgrade to version 10.2 from version 7.2 of the client, go to this page.
Legal Disclaimer
The acquisition of the Luna client is at the Customer's sole discretion and entirely subject to the terms of that third-party provider.