• Issue Overview: Objects created after a fragment key rotation event (such as destructive policy change, PIN change, partition zeroization, or re-initialization) may become inaccessible if a snapshot is restored.

Further information: For full technical details and recommended mitigation steps, please refer to KB0030646 on the Thales support portal (login required).

Single Sign-On (SSO) enables users to authenticate once and access multiple applications and services without logging in again. DPoD Users can request Single Sign On (SSO) for their email domain so that all logins are federated to use the IDP of their choice. SSO configuration may be requested via the Thales Support Portal. 

SSO improves the user experience and enhances security through centralized authentication. 

• For further details please see the Single Sign-On page in the documentation.
• Also, please refer to the Single Sign-On Customer FAQ page for more information.

The Quorum Feature is no longer in the test preview stage and is now available to all tenants.

New Features and Improvements:

• Disable and Re-Enable Quorum Policies -> Tenant Admins can now disable and re-enable quorum policies directly from the Management Console without contacting Thales Support. Disabling a policy requires quorum approval at the defined threshold, and any pending or approved quorum requests under the disabled policy are automatically canceled. Re-enabling a policy takes effect immediately and does not require quorum approval.
• Quorum Approval and Revocation Notifications -> All users in the tenant now receive email notifications when a quorum is approved or revoked.
• Quorum Policy Audit Logging -> All policy enable/disable actions, quorum approvals, rejections, and automatic cancelations are now logged with complete user and timestamp details.
• Policy Change History -> A complete history of enable/disable changes and parameter modifications is now maintained for each quorum policy.
• Email Notifications for Policy Changes -> Email notifications are sent for disable requests, approver votes, quorum achievement, and quorum cancelations due to policy disablement.
• Audit Logs for Deleted Services -> The Audit Logs page now lets you filter and view results for both active and deleted services. 
• Quorum Action Logs -> Audit logs now capture quorum-related actions linked to services for a complete audit trail.
  
  For further details please see the Quorum Policies page.

• Return active Service Instances -> New optional query parameter `includeDeleted` (boolean, default `false`). When set to `true`, the response includes deleted service instances with a new `deleted_at` field. Existing integrations are unaffected. 
• Create an asynchronous job to export audit logs -> Now automatically includes logs for deleted services when the requesting user has appropriate permissions. 

Thales Data Protection on Demand  (DPoD) has introduced a new Quorum Policy feature as a tech preview.

Quorum is an authorization policy that requires approval from multiple stakeholders before critical operations (e.g., deleting a service instance) can proceed. This prevents accidental or malicious actions by enforcing multi-party consent.

During the tech preview, quorum policy can be enforced on service deletion operations.

For further details please see the Quorum Policies page.

Fixed an issue where subscription details were not returned in the DPoD management portal for Service Provider users.

You can now filter your audit query results by use cases and resources directly within the user interface to find security events more efficiently.

What changed: Added a filter bar with dropdown options for Status, Source, Resource ID, Actor ID, and Action to the audit results page. This enhancement allows you to isolate relevant data quickly to improve your ability to monitor and analyze system activity. 

Navigate to the Logs section in the DPoD Management Console to use the new filters.

For details on using the Audit Logs, see Audit Logs thalesdocs.com

Notification to users with accounts created before February 2025. You will need to reaccept the Terms of Service on your next login as part of the One Welcome Identity Provider migration. 

Please note that the terms themselves have not changed. 

This reacceptance is required to ensure a smooth transition and uninterrupted service access.

DPoD has introduced a new Passkey feature which includes an associated Profile page. DPoD users can now login via the "Login with a Passkey" option or by using the "Help" menu located on the Login page.

From the Profile page users have the ability to manage settings including registering multiple Passkeys and changing the password/MFA. The Profile page also includes a timeline view which displays the user activity.

For further details see the Passkey Feature page.