Hardware Appliance 3.13 Release Notes

DECEMBER 2023

The Hardware Platform team is pleased to announce the release of EJBCA Hardware Appliance and SignServer Hardware Appliance version 3.13.0.

This release brings new updated versions of EJBCA Enterprise and SignServer Enterprise as well as updated versions of MariaDB and Galera cluster.

Highlights

New versions of EJBCA Enterprise and SignServer Enterprise

EJBCA Enterprise 8.2

Updated version of EJBCA Enterprise, see the EJBCA Release Notes.

SignServer Enterprise 6.2

Updated version of SignServer Enterprise, see the SignServer Release Notes.

End of support for Utimaco PKCS#11 R1

We have reached the final stage of phasing out support for the legacy Utimaco PKCS#11 R1 stack. Starting from this version, using PKCS#11 R1 is officially not supported and customers who are still using it with their current installation are required to upgrade and migrate to PKCS#11 R2.

Using the Hardware Appliance Web Configuration wizard, you can migrate your data to PKCS#11 R2 when restoring a backup of an installation still running PKCS#11 R1, see Migrating the HSM Key Material from PKCS#11 R1 to PKCS#11 R2. If you need help with the migration process, please contact Keyfactor support for assistance (support@keyfactor.com).

New Features and Improvements

The following lists new features and improvements included in the release.

Improvements

Update MariaDB version to 10.6.16
Update MariaDB Java Connector version to 2.7.11
Update Galera cluster version to 26.4.16

Bug Fixes

Fixed mail notifications
Fixed display of memory usage in WebConf Status page

Upgrade Information

It is recommended to create a backup before upgrading!

Important!

Since version 3.13.0 it is no longer possible to downgrade from Webconf to version 3.12.1 or earlier. For more information refer to Upgrade Notes.

It is strongly recommended to upgrade old versions to version 3.12.0 first and then to the desired higher version.

An update from a version older than 3.13.0 to a version 3.13.0 or higher will have impact on the cluster.
The cluster update is handled differently. For more information refer to Updating the Software on a Cluster

Please note the following known limitations when upgrading to version 3.13.0:

ECDSA-Brainpool Algorithms are only supported with P11NG
EJBCA WebService does not work if TLS 1.3 is enabled
Changing IPv4 address in a cluster might lead to IPv6 address disappearing
Updating a cluster node > node1 might lead to IPv6 address disappearing

For important upgrade information and limitations to be aware of, review the Upgrade Notes.