SignServer Hardware Appliance 5.2.2 Release Notes

MARCH 2026

We are pleased to announce the release of SignServer Hardware Appliance 5.2.2.

This update introduces significant new capabilities for offline data management and cluster control. With the addition of USB Backup and Restore support, administrators can now easily manage backups using physical media.

This release also includes an update to SignServer Enterprise 7.6 along with a variety of stability improvements and bug fixes.

Highlights

New version of SignServer Enterprise

SignServer Enterprise has been updated to version 7.6. For more information, see the SignServer Release Notes.

USB Drives for Backup and Restore

The Hardware Appliance now supports backup and restore operations using external USB drives. To improve usability, the Webconf interface has been enhanced to automatically detect and list connected USB drives, eliminating the need for manual path entry. This feature provides a robust solution for air-gapped environments or scenarios where network-based backups (NFS) are not preferred.

Improvements and Corrections

The following lists other improvements and corrections included in the release.

• Hardware/HSM:

  • Fixed an issue where the DPoD driver could be lost after an appliance update.

  • Resolved a stability issue where the u.trust internal PKCS#11 session could silently terminate.

  • Fixed an issue where Luna partitions in an HA group were not displayed correctly.

  • Fixed a bug that could cause the HSM container to fail initialization after upgrading from version 5.1.2.

• Webconf and UI:

  • Improved the labeling in Webconf for Smart card user PIN changes and the Change PIN on Admin button for better clarity.

  • Resolved various UI issues related to Luna slot initialization and synchronization status.

• System and Stability:

  • Fixed a bug where reboots did not wait for the database to shut down completely, preventing potential data corruption.

  • Resolved an issue where restoring with the keep current network configuration option caused all NICs to incorrectly use the default NIC's TLS certificate.

  • Fixed broken log rotation in the Base OS and disabled unnecessary system journal log forwarding to save resources.

  • Improved error handling for NFS browsing on the backup/restore page to provide more actionable feedback.

• Known Issue Resolved:

  Fixed a bug affecting large-scale exports where the restore process became unresponsive. Previously, users attempting to migrate large databases would encounter a permanent hang at the Prepare HSM step. This issue is now resolved, ensuring stable restoration for high-volume environments.

Upgrade Information

For information on the required steps to update the SignServer Hardware Appliance, refer to:

• u.trust HSM firmware update

• Luna HSM firmware update