Hardware Appliance 3.6.0 Release Notes

APRIL 2021

The PrimeKey Appliance team is pleased to announce the release of the EJBCA Hardware Appliance and SignServer Hardware Appliance version 3.6.0.

This release implements a migration process that allows you to migrate your HSM key material from PKCS#11 R1 to PKCS#11 R2.

Highlights

Migrating the HSM Key Material from PKCS#11 R1 to PKCS#11 R2

The Hardware Appliance supports the Hardware Security Module (HSM) PKCS#11 stack versions PKCS#11 R1 and PKCS#11 R2. Since the vendor of the HSM has deprecated PKCS#11 R1, we now provide a migration process implemented as a restore migration. 

Note that the migration process is implemented in preparation for phasing out PKCS#11 R1 support and since the Hardware Appliance still supports PKCS#11 R1 the migration is not mandatory. The currently implemented migration process does not cover the installation scenarios Smart Card Authentication (SCA) or 1.x generation hardware installations with the FIPS module loaded into the HSM. 

For more information on the migration option, see Restore System from Backup. For customers with a valid support contract (and support portal access), refer to migration information available on the PrimeKey Support Portal.

Upgrade Information

For important upgrade information and limitations to be aware of, review the Upgrade Notes.