Upgrading an existing deployment

Before upgrading an existing TSOP installation, we recommend:

  • Following the advice contained within Backup and recovery.

  • Reading the TSOP Release Notes in their entirety and acknowledging the implications of performing a firmware upgrade.

Upgrading TSOP

The following instructions apply when upgrading from a TSS 6.20.00 installation or later.

  1. Uninstall any previous TSOP installation through Program and Features.

  2. Restart the machine.

  3. Install TSOP, following the instructions and observing any installation prerequisites. See Installing the Time Stamp Option Pack.

Upgrading Security World Software

  1. Stop the DSE200 service via Microsoft’s Windows Services.

  2. Uninstall the Security World Software, following the Uninstalling Windows Software section of the Installation Guide for your HSM.

    Make a note of the location where the existing Security World Software is installed.

  3. Restart the machine.

  4. Install the Security World Software, following the Installing the software section of the Installation Guide for your HSM.

    Ensure that you install in the same location as the previous Security World Software installation.

  5. Restart the DSE200 service via Microsoft’s Windows Services.

Upgrading Firmware

  1. Stop the DSE200 service via Microsoft’s Windows Services.

  2. Follow the Upgrading firmware section of the User Guide for your HSM.

  3. Restart the DSE200 service via Microsoft’s Windows Services.

  4. It is then necessary to:

    1. Join an existing Security World, see Joining an existing Security World.

    2. If the following files exist, delete them from %NFAST_KMDATA%\local:

      • distore

      • tsastore

      • localaudit

      • key_dseapp_tssinteg

    3. Perform SEE delegation, see Security World: SEE delegation.

    4. Recreate the existing TSA configuration, restoring any TSA keys which were protected by an operator card set, see Restoring a TSA key.

Replacing an HSM

  1. Power off the system and while taking ESD precautions, remove the existing HSM. See the Installation Guide for your HSM for more information on installing an HSM and checking that it is usable.

  2. Ensure the HSM has the required features for TSOP to function. See Enabling features for further information.

  3. It is then necessary to:

    1. Join an existing Security World, see Joining an existing Security World.

    2. If the following files exist, back up and remove them from %NFAST_KMDATA%\local:

      • distore

      • tsastore

      • localaudit

      • key_dseapp_tssinteg

    3. Perform SEE delegation, see Security World: SEE delegation.

    4. Recreate the existing TSA configuration, restoring any TSA keys which were protected by an operator card set, see Restoring a TSA key.