The input fields for tenant registration, excluding the password field, will be trimmed. Leading and trailing spaces on input fields, excluding the password field, will be removed by the platform during registration. 

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for this behavior. 

See the Data Protection on Demand (DPoD) API for more information.

The following fields are being made mandatory for tenant registration when Country is set to United States, Canada, or Australia:

• State/Province/Region

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for these new mandatory fields. 

See the Data Protection on Demand (DPoD) API for more information about available endpoints and fields.

This change has been rescheduled to Tuesday February 8th 14:00 UTC to give customers more time to adjust their environments.

A knowledge base article with a full description of the change is available here. The article contains important information on mandatory changes for users on 10.0 or 10.1 client versions in North America.

This change introduces a new endpoint for validating the certificate status. Please ensure that operating systems hosting the client are able to validate the server certificate status (OCSP/CRL) using port 80. 

Ensure that these certificate revocation lists (CRLs) are accessible from the client machine prior to the planned change on Tuesday February 8th 14:00 UTC  to guarantee continuity of service.

Current CRL: http://crl.godaddy.com/gdig2s1-3235.crl
New CRL: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Platform CRL: http://crl3.digicert.com/ssca-sha2-g7.crl

The following fields are being made mandatory for tenant registration:

• Address
• City
• ZIP or postal code

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for these new mandatory fields. 

See the Data Protection on Demand (DPoD) Public API for more information about available endpoints and fields.

Under Development

If you are using an IP address in your HTTP Network Connection between your DPoD service and the DPoD platform we recommend you update your configuration to use the fully qualified domain name as described in Network Connectivity.

If your network configuration uses any hard coded IP addresses, be aware that upcoming changes to the DPoD platform will disrupt your connection to the service.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification coordination.

Added

• Added the Virtual Token Library (VTL) to the 1.10 HSMoD service client. 
• Client patched reducing timeout and failover issues during key and certificate migration.
• Direct link to SafeNet Data Protection on Demand **Status Page** available in user interface footer.
• The Company name no longer needs to be unique. Now, multiple enterprise tenants can share a common company name.
• Service provider monthly reports now include the minimum billable units (MBU) selection from the tenants **Initial Elections** form.

Deprecated

• Deprecating support for 32-bit operating systems.
• Ending support for Windows Server 2008 and Windows Server 2008 R2.

Removed

• You cannot download a new HSMoD service client for a service which existed prior to release 1.5. Recreate the service.

Bugs Fixed

• DPS-3071 - Deleting an application owner account before deleting any associated platform credentials results in being unable to delete both the platform credentials and any associated subscriber group.
• DPS-3006 - The HSM on Demand service generic mapping refers to key_vault in reports and the API.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification review.

Added

• Initial Elections Form. See Converting from Evaluation to Subscriber for more information.
• Disaster Recovery.

Changed

• FIPS Mode is more restrictive. See Customer Release Notes 1.11 for more information.
• Some criteria in platform wizards now mandatory.

Deprecated

• LunaProvider.jar

Removed

• You cannot download new HSMoD service clients for a service which existed prior to release 1.5. Recreate the service.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification review.
• Conversion from evaluation to subscriber tool for enterprise tenants.

Added

• Sign up page. See Registering Tenants Automatically for more information.

Removed

• You cannot download new HSMoD service clients for a service which existed prior to release 1.5. Recreate the service.

Bugs Fixed

• DPS-2159 - When the service provider administrator edits an enterprise tenant, the tenant administrator field displays empty.

Features under development

• DPoD enterprise tenant registration page
• Pipeline improvements

Added

• Introduced a multi-factor authentication requirement using an authentication application on a mobile device for all users.
• Added the following HSM on Demand service tiles:
  • HSM on Demand for CyberArk Digital Vault
  • HSM on Demand for Java Code Signer
  • HSM on Demand for Microsoft ADCS
  • HSM on Demand for Authenticode
  • HSM on Demand for Microsoft SQL Server
• Added the Key Migration Guide to the HSM Client Guides in the Help system. This migration guide now details the process for transferring key material from an Amazon Web Services (AWS) cloud HSM to a DPoD HSM on Demand service.

Changed

• Updated the following HSM on Demand service tiles:
  • HSM on Demand
  • HSM on Demand for Digital Signing
  • HSM on Demand for PKI Private Key Protection
  • HSMoD for Oracle Database
  • HSM on Demand for Hyperledger

Bugs Fixed

• DPS-2501 - The UI does not identify an invalid hostname when creating a tenant, resulting in the user having to repeat the tenant creation process.
• DPS-2159 - When the service provider administrator edits an enterprise tenant, the tenant admin field displays empty.
• DPS-2487 - Editing the tenant account name does not update the heading on the log in page.
• DPS-2434 - Deleting a tenant when the tenant account was accessed using the search box fails.