Additional Fields are now Mandatory for Tenant Registration

The following fields are now mandatory for tenant registration:

• Address
• City
• ZIP Code
• State/Province/Region*

* Mandatory if Country is set to United States, Canada, or Australia

The input fields for tenant registration, excluding the password field, will be trimmed. Leading and trailing spaces on input fields, excluding the password field, will be removed by the platform during registration. 

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for this behavior. 

See the Data Protection on Demand (DPoD) API for more information.

The following fields are being made mandatory for tenant registration when Country is set to United States, Canada, or Australia:

• State/Province/Region

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for these new mandatory fields. 

See the Data Protection on Demand (DPoD) API for more information about available endpoints and fields.

This change has been rescheduled to Tuesday February 8th 14:00 UTC to give customers more time to adjust their environments.

A knowledge base article with a full description of the change is available here. The article contains important information on mandatory changes for users on 10.0 or 10.1 client versions in North America.

This change introduces a new endpoint for validating the certificate status. Please ensure that operating systems hosting the client are able to validate the server certificate status (OCSP/CRL) using port 80. 

Ensure that these certificate revocation lists (CRLs) are accessible from the client machine prior to the planned change on Tuesday February 8th 14:00 UTC  to guarantee continuity of service.

Current CRL: http://crl.godaddy.com/gdig2s1-3235.crl
New CRL: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Platform CRL: http://crl3.digicert.com/ssca-sha2-g7.crl

The following fields are being made mandatory for tenant registration:

• Address
• City
• ZIP or postal code

If you have automation using the API for tenant registration and tenant updating you should modify your automation to account for these new mandatory fields. 

See the Data Protection on Demand (DPoD) Public API for more information about available endpoints and fields.

Version 10.4.1 of the Luna HSM client is now available for download from the Thales Customer Support Portal.  This client supports hybrid usage of both Luna Cloud HSM services and the Luna HSM product line, as detailed in the Luna Cloud HSM Client User Guide.

• Download Luna HSM Client 10.4.1 for Windows
• Download Luna HSM Client 10.4.1 for Linux

Added

• Luna HSM Client 10.4.1 allows you to initialize a Luna Cloud HSM service using a domain secret imported from a red PED key. This allows you to clone objects between PED-authenticated Luna HSM partitions and Luna Cloud HSM enabling cloud backups and improving availability by adding Luna Cloud HSM to your HA groups. See Initializing a Luna Cloud HSM Service for more information.

Under Development

If you are using an IP address in your HTTP Network Connection between your DPoD service and the DPoD platform we recommend you update your configuration to use the fully qualified domain name as described in Network Connectivity.

If your network configuration uses any hard coded IP addresses, be aware that upcoming changes to the DPoD platform will disrupt your connection to the service.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification coordination.

Added

• Added the Virtual Token Library (VTL) to the 1.10 HSMoD service client. 
• Client patched reducing timeout and failover issues during key and certificate migration.
• Direct link to SafeNet Data Protection on Demand **Status Page** available in user interface footer.
• The Company name no longer needs to be unique. Now, multiple enterprise tenants can share a common company name.
• Service provider monthly reports now include the minimum billable units (MBU) selection from the tenants **Initial Elections** form.

Deprecated

• Deprecating support for 32-bit operating systems.
• Ending support for Windows Server 2008 and Windows Server 2008 R2.

Removed

• You cannot download a new HSMoD service client for a service which existed prior to release 1.5. Recreate the service.

Bugs Fixed

• DPS-3071 - Deleting an application owner account before deleting any associated platform credentials results in being unable to delete both the platform credentials and any associated subscriber group.
• DPS-3006 - The HSM on Demand service generic mapping refers to key_vault in reports and the API.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification review.

Added

• Initial Elections Form. See Converting from Evaluation to Subscriber for more information.
• Disaster Recovery.

Changed

• FIPS Mode is more restrictive. See Customer Release Notes 1.11 for more information.
• Some criteria in platform wizards now mandatory.

Deprecated

• LunaProvider.jar

Removed

• You cannot download new HSMoD service clients for a service which existed prior to release 1.5. Recreate the service.

Features under development

• FIPS Certification Firmware Candidate - The HSM firmware is undergoing FIPS certification review.
• Conversion from evaluation to subscriber tool for enterprise tenants.

Added

• Sign up page. See Registering Tenants Automatically for more information.

Removed

• You cannot download new HSMoD service clients for a service which existed prior to release 1.5. Recreate the service.

Bugs Fixed

• DPS-2159 - When the service provider administrator edits an enterprise tenant, the tenant administrator field displays empty.