The CipherTrust Data Security Platform as a Service (CDSPaaS) is now available for provisioning through Thales Data Protection on Demand.
For more information about CDSPaaS see CipherTrust Data Security Platform Services (CDSPaaS).
For more information about provisioning the service and getting started with CDSPaaS see Get Started with CipherTrust Data Security Platform Services.
The new Universal Client Supported Versions with Luna Cloud HSM policy has been created. This outlines the date of the released Universal Clients and their 'end of support' timelines.
If your Universal Client is found to be no longer supported it is strongly recommended that you upgrade to the latest version at your earliest convenience.
See Upgrading your Client for more information.
The DPoD Key Broker for Google Cloud EKM service now supports the following Key Access Justification reason codes:
For more information about the service see Key Broker for Google Cloud EKM. For more information about the newly supported codes see Key Access Justification Reason Codes.
Thales Data Protection on Demand has made the following changes to how billing and service subscriptions work in DPoD:
Tenants that have an accepted Service Elections form will have the following changes:
Tenants that do not have an accepted Service Elections form will have the following changes:
Note: If your tenant is unable to retrieve and display subscriptions please contact Thales support to resolve the issue. You will be unable to provision new services until the issue is resolved.
The Service Provider Tenant Usage Report and the associated tenants/usageReport, tenants/usageDetails, and service_instances/usageDetails endpoints are deprecated and will be removed from the platform by the end of 2023.
As an alternative use the Service Report in the DPoD service provider tenant or the /v1/service_instances/usageBillingReport endpoint, and the /v1/backoffice/serviceAgreements{tenantId} endpoint to compile tenant usage information.
The CipherTrust Data Security Platform is now visible in EU tenants as a beta service offering. Access to the beta service is restricted at this time. The beta service is disabled in all tenants that are not participating in the beta.
For more information about registering for the CipherTrust Data Security Platform beta please contact steve.kingston@thalesgroup.com.
The enterprise tenant View Services table now includes a Status column. The Status column provides details on the service provisioning state of the service.
Possible values for Status include:
See the View Services Table for more information.
FW 2.0 has now been FIPS approved.
The NIST Certificate verifying that FW 2.0 is now FIPS approved can be found in this Cryptographic Module Validation Program link.
The firmware versions for Luna Cloud HSM Services operating in FIPS and non-FIPS NA and EU environments have been updated. The new firmware versions based on region and FIPS mode are as follows:
In addition to the new releases, FW 2.0.1 also includes the following bug fixes:
The DPoD Platform API has deprecated the tileId parameter on the POST /serviceAgreements endpoint and the tileName parameter on the GET /serviceAgreements{tenantId} endpoint.
The tileId parameter on the POST /serviceAgreements and tileName parameter on the GET /serviceAgreements{tenantId} endpoint will be removed from the platform in a future update.
See the Subscriptions API for more information about available endpoints, fields and scopes.
Version 10.5 of the HSM client is now available for download from Thales Data Protection on Demand for Luna Cloud HSM services. This client supports hybrid usage of both Luna Cloud HSM services and the Luna HSM product line, as detailed in the Luna Cloud HSM Client User Guide. See Upgrade Client for more information about upgrading your client.
Added
Universal Cloning (CPv4) will be a supported feature in UC 10.5.0 but only when used with Firmware 2.0. Universal Cloning can be used for key migration to any trusted Thales HSMs that also support the Universal Cloning protocol.
In order to use the Universal Cloning feature, the following must be true:
NOTE: You can only clone between initialized partitions, and they must have the same cloning domain (secret), which is provided at the time of initialization.
More info can be found here: Universal Cloning
As of UC 10.5, the configuration of multiple users will be supported which allows multiple partition slots to be accessed from a single client instance. This allows customers to add multiple Luna Cloud HSM service UserID's (a combination of unique AuthTokenClientID, AuthTokenClientSecret, AuthTokenConfigURI) without the need to restart the application after the addition of a new UserID. This will enable a service provider to configure multiple UserID's without impacting the service any of the other users in the same UC instance.
The ability to load multiple partitions to the same UserID without impacting service to other users will also be supported. If an attempt is made to add the same partition ID to a different user that will be ignored and a Warning log will be generated.
More info can be found here: UC Dynamic UserID
For more information about client features and enhancements and client advisory notes see 10.5 Client Customer Release Notes. See Known and Resolved Issues for more information about existing problems and available workarounds.
