EJBCA Software Appliance 2.9.1 Release Notes

MARCH 2026

We are pleased to announce the release of EJBCA Software Appliance 2.9.1.

With this release, we have added support for Utimaco SecurityServer 5.1.2.0. CP5 client software, improved nShield and Luna HSM integrations, supporting USB drives for Backup & Restore and implemented database optimizations. The release also brings the latest application version, EJBCA 9.5.1, along with improved system reliability and log management and a range of further improvements and bug fixes.

Highlights

New version of EJBCA Enterprise

EJBCA Enterprise has been updated to version 9.5.1. For more information, see the EJBCA Release Notes.

Optimized Certificate Processing Performance for Internal DB

New indices allow for faster counting of certificates. This keeps the EJBCA Application responsive and prevents delays when operating in large databases.

Support for Utimaco SecurityServer 5.1.2.0. CP5

This release introduces official support for the latest Utimaco 5.1.2.0 firmware, ensuring full compatibility and stability for users of Utimaco SecurityServer 5.1.2.0. CP5 HSMs.

Enhanced nShield and Luna HSM Stability

Significant improvements have been made to nShield and Luna HSM integrations. This includes a fix for nShield preload operations to ensure connection reliability and improved display and recovery logic for Luna HA Groups, ensuring consistent HSM availability.

Improved System Reliability and Lifecycle

The appliance shutdown sequence has been optimized to ensure all services are terminated gracefully, preventing system timeouts during maintenance. Additionally, log rotation and system journal handling have been stabilized to ensure long-term operational health without manual intervention.

Improvements and Corrections

The following lists other improvements and corrections included in the release.

• Fixed a regression where SoftHSM 2.0 became unavailable after upgrading from version 2.8.2.

• Resolved issues where "Allow CVC CAs" settings were not consistently applied during first boot or rapid configuration changes.

• Community strings and usernames now support the use of hyphens (-), and new OIDs for resource tracking have been added.

• Resolved a regression that hindered the reliable generation of support packages for troubleshooting.

• Improved IP address handling by normalizing addresses before comparison to avoid configuration mismatches.

Upgrade Information

For information on the required steps to update the EJBCA Software Appliance, see Update Software Appliance.