Previous Client SDK versions
AWS CloudHSM includes two major Client SDK versions:
-
Client SDK 5: This is our latest and default Client SDK. For information on the benefits and advantages it provides, see Benefits of Client SDK 5.
-
Client SDK 3: This is our older Client SDK. It includes a full set of components for platform and language-based applications compatibility and management tools.
Client SDK 3 documentation is listed in this section.
To download, see Downloads for AWS CloudHSM Client SDK.
Check your client SDK version
Client SDK component comparison
In addition to the command-line tools, Client SDK 3 contains components that enable off-loading cryptographic operations to the HSM from various platform or language-based applications. Client SDK 5 does not have parity with Client SDK 3 at this time, but parity is the goal. The following table compares component availability in Client SDK 3 and Client SDK 5.
Component | Client SDK 5 | Client SDK 3 |
---|---|---|
PKCS #11 library |
Yes |
Yes |
JCE provider | Yes | Yes |
OpenSSL Dynamic Engine | Yes |
Yes |
CNG and KSP providers | Yes | |
CloudHSM Management Utility | Yes1 | |
Key management utility | Yes | |
Configure tool | Yes | Yes |
[1] To manage HSM users with Client SDK 5, you must use a standalone version of CloudHSM CLI or the CMU. For more information, see Managing HSM users with CloudHSM CLI and Managing HSM users with CloudHSM Management Utility (CMU).