Previous Client SDK (Client SDK 3) - AWS CloudHSM

Previous Client SDK (Client SDK 3)

AWS CloudHSM includes two major Client SDK versions:

  • Client SDK 5: This is our latest and default Client SDK. For information on the benefits and advantages it provides, see Benefits of Client SDK 5.

  • Client SDK 3: This is our older Client SDK. It includes a full set of components for platform and language-based applications compatibility and management tools.

For instructions on migrating from Client SDK 3 to Client SDK 5, see Migrating from Client SDK 3 to Client SDK 5.

Client SDK 3 documentation is listed in this topic.

To download, see Downloads for AWS CloudHSM Client SDK.

Check your client SDK version

Amazon Linux

Use the following command:

rpm -qa | grep ^cloudhsm
Amazon Linux 2

Use the following command:

rpm -qa | grep ^cloudhsm
CentOS 6

Use the following command:

rpm -qa | grep ^cloudhsm
CentOS 7

Use the following command:

rpm -qa | grep ^cloudhsm
CentOS 8

Use the following command:

rpm -qa | grep ^cloudhsm
RHEL 6

Use the following command:

rpm -qa | grep ^cloudhsm
RHEL 7

Use the following command:

rpm -qa | grep ^cloudhsm
RHEL 8

Use the following command:

rpm -qa | grep ^cloudhsm
Ubuntu 16.04 LTS

Use the following command:

apt list --installed | grep ^cloudhsm
Ubuntu 18.04 LTS

Use the following command:

apt list --installed | grep ^cloudhsm
Ubuntu 20.04 LTS

Use the following command:

apt list --installed | grep ^cloudhsm
Windows Server

Use the following command:

wmic product get name,version

Client SDK component comparison

In addition to the command-line tools, Client SDK 3 contains components that enable off-loading cryptographic operations to the HSM from various platform or language-based applications. Client SDK 5 has parity with Client SDK 3, except it does not yet support CNG and KSP providers. The following table compares component availability in Client SDK 3 and Client SDK 5.

Component Client SDK 5 Client SDK 3
PKCS #11 library

Yes

Yes

JCE provider Yes Yes
OpenSSL Dynamic Engine Yes

Yes

CNG and KSP providers Yes
CloudHSM Management Utility (CMU)1 Yes Yes
Key Management Utility (KMU)1 Yes Yes
Configure tool Yes Yes

[1] CMU and KMU components are included in CloudHSM CLI with Client SDK 5.