EJBCA Cloud 2.5 Release Notes

PrimeKey is proud to announce the release of EJBCA Cloud 2.5.

Highlights

EJBCA Enterprise Upgrade

EJBCA Cloud updates EJBCA Enterprise to version 7.4.3, see EJBCA 7.4.3 Release Notes.

New Features and Improvements

The following lists new features and other changes included in the release.

EC-163 - Allow "none" for publicIP to be selected in Azure template

EC-164 - Upgrade EJBCA to 7.4.3

EC-165 - Upgrade CentOS7.x to CentOS8.2 in Azure

EC-166 - Refactor how PublicDNS name is detected to make it no longer dependent on azure environment metadata or variables.

Issues with older versions:

AWS has made some changes to the underlying firmware on their HSMs which has caused the HSM clients to stop working with EJBCA. Once the HSMs are shut down or restored from backup the firmware is upgraded and will no longer work with older clients. This requires an upgrade of the HSM client on the EJBCA Cloud instance. If your HSM client or EJBCA no longer connects to the HSM in AWS, perform the following:

wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-latest.el7.x86_64.rpm -O /opt/dist/cloudhsm-client-latest.el7.x86_64.rpm
sudo yum install -y /opt/dist/cloudhsm-client-latest.el7.x86_64.rpm
wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm -O /opt/dist/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
sudo yum install -y /opt/dist/cloudhsm-client-pkcs11-latest.el7.x86_64.rpm
systemctl restart cloudhsm-client

Upgrade Information

For information on how to upgrade an EJBCA Cloud hourly instance node from one version of EJBCA to another, see the AWS Restore and Upgrade Guide and Azure Restore and Upgrade Guide, respectively.