View a markdown version of this page

Install the JCE provider for AWS CloudHSM Client SDK 5 - AWS CloudHSM
Step 1: Install the JCE providerStep 2: Provide credentials to the JCE provider

Install the JCE provider for AWS CloudHSM Client SDK 5

The JCE provider for AWS CloudHSM Client SDK 5 is compatible with OpenJDK 17, OpenJDK 21, and OpenJDK 25. You can download OpenJDK from the OpenJDK website.

Note

  • Client SDK 5.17.0 is the last release to support OpenJDK 8.

  • Client SDK 5.17.1 is the last release to support OpenJDK 11.

Use the following sections to install and provide credentials to the provider.

Note

To run a single HSM cluster with Client SDK 5, you must first manage client key durability settings by setting disable_key_availability_check to True. For more information, see Key Synchronization and Client SDK 5 Configure Tool.

Step 1: Install the JCE provider

  1. Use the following commands to download and install the JCE provider.

    Amazon Linux 2023

    Install the JCE provider for Amazon Linux 2023 on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Amzn2023/cloudhsm-jce-latest.amzn2023.x86_64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.amzn2023.x86_64.rpm

    Install the JCE provider for Amazon Linux 2023 on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Amzn2023/cloudhsm-jce-latest.amzn2023.aarch64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.amzn2023.aarch64.rpm
    Amazon Linux 2

    Install the JCE provider for Amazon Linux 2 on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-jce-latest.el7.x86_64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el7.x86_64.rpm

    Install the JCE provider for Amazon Linux 2 on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-jce-latest.el7.aarch64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el7.aarch64.rpm
    RHEL 10 (10.0+)

    Install the JCE provider for RHEL 10 on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL10/cloudhsm-jce-latest.el10.x86_64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el10.x86_64.rpm

    Install the JCE provider for RHEL 10 on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL10/cloudhsm-jce-latest.el10.aarch64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el10.aarch64.rpm
    RHEL 9 (9.2+)

    Install the JCE provider for RHEL 9 (9.2+) on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL9/cloudhsm-jce-latest.el9.x86_64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el9.x86_64.rpm

    Install the JCE provider for RHEL 9 (9.2+) on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL9/cloudhsm-jce-latest.el9.aarch64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el9.aarch64.rpm
    RHEL 8 (8.3+)

    Install the JCE provider for RHEL 8 on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-jce-latest.el8.x86_64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el8.x86_64.rpm

    Install the JCE provider for RHEL 8 on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL8/cloudhsm-jce-latest.el8.aarch64.rpm
    $ sudo yum install ./cloudhsm-jce-latest.el8.aarch64.rpm
    Ubuntu 26.04 LTS

    Install the JCE provider for Ubuntu 26.04 LTS on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Resolute/cloudhsm-jce_latest_u26.04_amd64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u26.04_amd64.deb

    Install the JCE provider for Ubuntu 26.04 LTS on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Resolute/cloudhsm-jce_latest_u26.04_arm64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u26.04_arm64.deb
    Ubuntu 24.04 LTS

    Install the JCE provider for Ubuntu 24.04 LTS on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Noble/cloudhsm-jce_latest_u24.04_amd64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u24.04_amd64.deb

    Install the JCE provider for Ubuntu 24.04 LTS on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Noble/cloudhsm-jce_latest_u24.04_arm64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u24.04_arm64.deb
    Ubuntu 22.04 LTS

    Install the JCE provider for Ubuntu 22.04 LTS on x86_64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Jammy/cloudhsm-jce_latest_u22.04_amd64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u22.04_amd64.deb

    Install the JCE provider for Ubuntu 22.04 LTS on ARM64 architecture:

    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Jammy/cloudhsm-jce_latest_u22.04_arm64.deb
    $ sudo apt install ./cloudhsm-jce_latest_u22.04_arm64.deb
    Windows Server

    Install the JCE provider for Windows Server on x86_64 architecture, open PowerShell as an administrator and run the following command:

    PS C:\> wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Windows/AWSCloudHSMJCE-latest.msi -Outfile C:\AWSCloudHSMJCE-latest.msi
    PS C:\> Start-Process msiexec.exe -ArgumentList '/i C:\AWSCloudHSMJCE-latest.msi /quiet /norestart /log C:\client-install.txt' -Wait

  2. Bootstrap Client SDK 5. For more information about bootstrapping, see Bootstrap the Client SDK.

  3. Locate the following JCE provider files:

    Linux

    • /opt/cloudhsm/java/cloudhsm-<version>.jar

    • /opt/cloudhsm/bin/configure-jce

    • /opt/cloudhsm/bin/jce-info

    Windows

    • C:\Program Files\Amazon\CloudHSM\java\cloudhsm-<version>.jar>

    • C:\Program Files\Amazon\CloudHSM\bin\configure-jce.exe

    • C:\Program Files\Amazon\CloudHSM\bin\jce_info.exe

Step 2: Provide credentials to the JCE provider

Before your Java application can use an HSM, the HSM needs to first authenticate the application. HSMs authenticate using either an explicit login or implicit login method.

Explicit login – This method lets you provide AWS CloudHSM credentials directly in the application. It uses the method from the AuthProvider, where you pass a CU username and password in the pin pattern. For more information, see