Thales Data Protection on Demand  (DPoD) has introduced a new Quorum Policy feature as a tech preview.

Quorum is an authorization policy that requires approval from multiple stakeholders before critical operations (e.g., deleting a service instance) can proceed. This prevents accidental or malicious actions by enforcing multi-party consent.

During the tech preview, quorum policy can be enforced on service deletion operations.

For further details please see the Quorum Policies page.

You can now filter your audit query results by use cases and resources directly within the user interface to find security events more efficiently.

What changed: Added a filter bar with dropdown options for Status, Source, Resource ID, Actor ID, and Action to the audit results page. This enhancement allows you to isolate relevant data quickly to improve your ability to monitor and analyze system activity. 

Navigate to the Logs section in the DPoD Management Console to use the new filters.

For details on using the Audit Logs, see Audit Logs thalesdocs.com

Notification to users with accounts created before February 2025. You will need to reaccept the Terms of Service on your next login as part of the One Welcome Identity Provider migration. 

Please note that the terms themselves have not changed. 

This reacceptance is required to ensure a smooth transition and uninterrupted service access.

DPoD has introduced a new Passkey feature which includes an associated Profile page. DPoD users can now login via the "Login with a Passkey" option or by using the "Help" menu located on the Login page.

From the Profile page users have the ability to manage settings including registering multiple Passkeys and changing the password/MFA. The Profile page also includes a timeline view which displays the user activity.

For further details see the Passkey Feature page.

Resulting from recent upgrades in our back office systems users will notice the following changes in the Subscriptions table:

• New Subscription Numbers - All subscriptions are assigned a new identification number. The previously used subscription id will appear in parenthesis "()" in the number column.
• Term End Date Display- Prior to this change, the table would show a 12 month term start date as Jan 1 2025 and end date as Jan 1 2025. Going forward will show a 12 month term start date as Jan 1 2025 and end date as Dec 31 2025.
• New Overage Line - Subscriptions with an overage usage component now include a separate line item for overage.

The Luna Cloud HSM client bundle is updated to include the 10.9.0 Universal Client. Users are encouraged to upgrade to this latest client version and ensure it is supported in accordance with the Universal Client Supported Versions with Luna Cloud HSM table.

See Upgrade Client for more information about upgrading your client.

Bugs fixed 

Resolved an Invalid memory access issue when running on a Windows Cloud Plugin. 

The new Luna Cloud HSM Snapshot feature is now available to all users. Service snapshots allow Luna Cloud HSM users to restore their service partition to a previous snapshot to recover from zeroization or accidental deletion of keys. A snapshot is a complete capture of the state of the partition that includes all partition objects, (e.g keys and certificates), as well as the current state of credentials for partition users. 

Luna Cloud HSM Service snapshots are introduced with the following supported items:

• Snapshots in the Management UI: 
  • You can now create, view and manage service snapshots directly through the UI (User Interface).
• Daily Automatic Snapshots:
  • Snapshots automatically created every day.
  • Retained for 7 days.
• User-Generated Snapshots:
  • Create up to 3 snapshots per partition.
  • Each user-generated snapshot is retained for 3 months.
• Audit Log Integration:
  • All snapshot events are recorded in the Audit Log for full traceability.

See Service Snapshots for creating, deleting and restoring information.

The public endpoints  GET /v1/backoffice/accountStatuses and  GET /v1/backoffice/accountStatuses/{id}are deprecated and will be removed in a future release.
If you rely on them to know the status of a Tenant under your Service Provider, or for your own Tenant regarding the existence of an initial Service Election, you can use GET /v1/backoffice/serviceAgreements/{tenantId}to get the same information to determine if an initial Service Election has been submitted, approved or expired.

NOTE: The GET /v1/backoffice/subscriptions endpoint returns a list of existing subscriptions for:

• The current tenant, or
• A specified tenant (if one is provided),

…but not for any particular requested subscription.

The Luna Cloud HSM Client Deprecation List has been updated to reflect the latest versions that are available for continued support. It is recommended  to update to the latest supported client as soon as possible to avoid service disruptions.

This is the link to the updated Deprecated List.

The Thales Data Protection on Demand Terms of Service has been updated and is now included in the Thales Cyber Security Products End User Agreement. 

Please review the updated terms at its new location, https://cpl.thalesgroup.com/legal, for more information.