Luna SA HSM - Syntax Error: Token number 1 (scp) not recognized. Command Result : 22 (Invalid argument)

Question

I'm trying to setup NTLS from SafeNet Luna Client to Luna SA HSM. For that I need to scp the server certificate from the HSM to the Client machine. When I run the command 'scp admin@:server.pem .', it throws the error: Syntax Error: Token number 1 (scp) not recognized. Command Result : 22 (Invalid argument)

Same error comes when I try to upload the client certificate to the HSM.

How to enable or install scp on HSM? Or what is an alternative way to upload the client certificate to the HSM other than scp?

Answer 1

You should be running scp from your client OS. Is it installed? The Windows version of the Luna client also installs PuTTY for you, so that should be available in Program Files\SafeNet\LunaClient.

Alternatively, from the Luna client utility (lunacm) simply run clientconfig deploy -client <your client IP> -server <HSM IP> -partition <partition name> adding -hsmPassword <partition SO password> if it's a password protected Luna HSM (otherwise you'll be prompted for the blue SO keys on a MFA Luna HSM). The command will prompt you for the HSM appliance administrator password. This command automates the scp of the certificates in both directions and adds the client to the partition authorisation list in one go.

https://thalesdocs.com/gphsm/luna/7/docs/network/Content/lunacm/commands/clientconfig/clientconfig_deploy.htm