Deprecated

The DPoD Platform API is deprecating the PATCH /tenants/{id}/admin/reset and POST /tenants/{id}/admin/resetMfaToken operations. 

Tenant administrators can use the self-service password reset from the DPoD tenant log in screen or request that a sibling tenant administrator reset their password. Tenant administrators must request an MFA reset from a sibling tenant administrator.

These endpoints will be removed from the platform in a future update. 

Added 

• Subscriber tenant administrators can complete the Add Service Elections Form, a separate commitment from the Initial Service Elections Form, to demonstrate additional service commitments to their service provider.

Bugs Found

• DPS-6769 - The Salesforce Key Broker service does not update the Last Modified At and Modified By columns in the Service Details tables when service secrets are updated.

Bugs Fixed

• DPS-6737 DPoD Terms of Service now display correctly in the Safari browser. The DPoD Terms of Service are always available from the support portal. 
• DPS-6761 - If the DPoD user interface cannot display the Salesforce Secret Type, the DPoD user interface will display the Salesforce value. 

Changed

• Non-FIPS Luna Cloud HSM service firmware has been updated to version 1.4.2. Firmware version 1.4.2 provides various performance improvements and is an enabler for future marketplace services. See Luna Cloud HSM Services for more information about FIPS and non-FIPS services.

Deprecated

• The DPoD platform will remove the ability for a service provider administrator to reset a tenant administrators account password. Tenant administrators can use the self-service password reset from the DPoD tenant login screen or request that a sibling tenant administrator reset their password.

Bugs Fixed

• SH-4366 - Firmware version 1.4.2 for non-FIPS Luna Cloud HSM services disallows the creation of a key with both the "public" and "sensitive" attribute combination.  

Added

• Added the company name as a mandatory criteria for tenant creation.

Added

• Thales Data Protection on Demand now includes an HSM on Demand with Key Export service. The HSM on Demand with Key Export provides users with remote access to an HSM with private key exporting. For more information see HSM on Demand with Key Export.

Added

• The DPoD service client is now fully compatible with CipherTrust Manager version 2.1, allowing Luna Cloud HSM services to act as the root of trust for CipherTrust Manager Instances. 
• The Service Provider Tenant Service Report, a report on all Tenants and the Services they are consuming, is now available for Service Provider Tenants in the DPoD platform. See Reporting for more information about the new report.
• The External Marketplace Name and External Marketplace Account Id columns have been added to all Service Provider reports in the DPoD platform.

Bugs Fixed

• DPS-5823 - New service clients created in the North America (NA) environment can connect to a service on Windows Server 2012r2 operating systems. 

Added

• Service Provider Administrator Platform Credentials. Platform credentials allow Service Provider Administrators to access and mange tenants, users, and reports using the DPoD API.

Changed

• "HSM on Demand Services" are now "Luna Cloud HSM Services"
• "Key Management on Demand Services" are now "CipherTrust Key Management Services"

Added

• The CipherTrust Key Broker for Google Cloud EKM service is now available. Register for the service through the Google Marketplace to gain access to an HSM secured key encryption key for use as a wrapping key in Google Cloud EKM. Access the service documentation for more information about the CipherTrust Key Broker for Google Cloud EKM service.

Bugs Found

• EKMS-652 - The Add Key Ring button is disabled in the CipherTrust Key Broker for Google Cloud EKM service if you attempt to create a Key Ring without first adding an EKM Policy. Create an EKM Policy before adding a Key Ring.
• EKMS-659 - The CipherTrust Key Broker for Google Cloud EKM dashboard URL shows a 404.  Access the CipherTrust Key Broker for Google Cloud EKM log in page and enter the FQDN of your CipherTrust Key Broker for Google Cloud EKM dashboard to log in.
• DPS-5823 - New service clients created in the North America (NA) environment cannot connect to a service on Windows Server 2012r2 operating systems.

• DPS-5433 - Administrator users can now reset their own password using the Actions column in the User Details table. When changing your own password, the option displays as Change Password. When changing another users password, the option displays as Reset User Password.
• DPS-5493 - The Rotation Policies section of the Salesforce Key Broker service displays.