SignServer Hardware Appliance 5.1.2 Release Notes

AUGUST 2025

We are pleased to announce the release of SignServer Hardware Appliance 5.1.2.

With this release, we have added support for FIPS enablement with both variants of HSMs: Luna S790 and u.trust and Se100/Se2K.

The release also brings a list of improvements and bug fixes.

Highlights

Version of SignServer Enterprise

This release is delivered with SignServer 7.3.2. For more information, see the SignServer Release Notes.

New Features

Using the HSM in FIPS mode: with this release it is possible to select during the first installation or when restoring a backup either to run the HSM in FIPS mode or not. The procedure to enable FIPS mode might require extra steps compared to the non-FIPS setup of the HSM. Please refer to the documentation for further details.

Improvements and Corrections

The following lists other corrections included in the release.

Bug fixes:
- Backup tab crashes on webconf when trying to connect to non reachable NFS server.
- Factory reset not successful without a configured DHCP or Static IP address
- If a backup taken from version 5.1.1 or older and restored on one of the mentioned version, the u.trust HSM Firmware update process will be broken.

Upgrade Information

A current backup must always be created for security purposes before processes such as updates, etc. are carried out.
If a u.trust HSM firmware update from version 5.1.0 or 5.1.1 is not successful on an the appliance that has been restored from a backup that was taken from an older version, you need to:
- take a new backup
- factory reset the appliance
- update the appliance to version 5.1.2
- restore the taken backup.
Note:
A known issue during the update process that will be fixed in the upcoming Next Generation Hardware Release 5.2.0 is the problem of non-sequential updates.
If a non-sequential update has been performed, there is no guarantee that the device will function as expected when updating the HSM firmware.
Sequential updates are recommended (5.0.0 → 5.1.0 → 5.1.2).
The HSM firmware update must be performed after updating to 5.1.0.
- If the recommend sequence has not been followed:
  reset HSM on Appliance with Luna:
  first HSM Reset Luna
  next Factory Reset on Appliance with Luna
  or Factory Reset on Appliance with u.trust.
  After restarting, log in to Webconf with the OTP displayed on the front display.
  Navigate to the Restore section and restore the newly created backup.
  After restarting, the device will be in the desired state.
- If FIPS is to be used:
  The first steps are exactly as described above. Only when restoring the newly created backup, the checkbox for FIPS must be activated. Then the backup can be restored.
  After restarting, the device will run in FIPS mode.

Rollback Information

Until further notice, we do not support downgrades in the Next Generation Hardware Appliance. Only rollbacks are supported. If, after performing an upgrade, the new version is not suitable, click Rollback to undo the step.