本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
安装和配置 AWS CloudHSM 客户端 (Linux)
要与 AWS CloudHSM 集群中的 HSM 交互,您需要使用适用于 Linux 的 AWS CloudHSM 客户端软件。您应在之前创建的 Linux EC2
客户端实例上安装该软件。如果您使用的是 Windows,也可以安装客户端。有关更多信息,请参阅 安装和配置 AWS CloudHSM DHSM 客户端 (Windows)。
安装 AWS CloudHSM 客户端和命令行工具
Connect 到客户端实例并运行以下命令可下载和安装 AWS CloudHSM 客户端和命令行工具。
Amazon Linux
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-latest.el6.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el6.x86_64.rpm
Amazon Linux 2
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm
CentOS 7
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm
CentOS 8
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm
RHEL 7
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el7.x86_64.rpm
RHEL 8
sudo yum install wget
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-client-latest.el8.x86_64.rpm
sudo yum install ./cloudhsm-client-latest.el8.x86_64.rpm
Ubuntu 16.04 LTS
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client_latest_amd64.deb
sudo apt install ./cloudhsm-client_latest_amd64.deb
Ubuntu 18.04 LTS
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Bionic/cloudhsm-client_latest_u18.04_amd64.deb
sudo apt install ./cloudhsm-client_latest_u18.04_amd64.deb
编辑客户端配置
您必须先编辑客户端配置,然后才能使用 AWS CloudHSM 客户端连接到集群。
编辑客户端配置
复制您的签发证书 —您用于签署集群证书的证书— 到客户端实例上的以下位置:/opt/cloudhsm/etc/customerCA.crt。您需要在客户端实例上具有实例根用户权限才能将您的证书复制到该位置。
请使用以下:configure命令可以更新 AWS CloudHSM 客户端和命令行工具的配置文件,并指定您群集中 HSM 的 IP 地址。要获取 HSM 的 IP 地址,请在AWS CloudHSM 控制台,或运行EniIp 字段的值。如果您有多个 HSM,请选择其中任一 HSM 的 IP 地址;选择哪个 HSM 并不重要。
sudo /opt/cloudhsm/bin/configure -a Updating server config in /opt/cloudhsm/etc/cloudhsm_client.cfg
Updating server config in /opt/cloudhsm/etc/cloudhsm_mgmt_util.cfg