Back to articles
Back to Index

Posted on 01 September 2026 by in Luna HSM

 

Reminder: Thales Luna USB & Backup HSMs (G5) Reach EoL Sept 30, 2026

As a reminder to customers still using Thales Luna USB HSM (G5) or Luna Backup HSM (G5), the End-of-Life (EoL) date for these products is approaching:

  • September 30, 2026, is the final End-of-Life date for Luna USB HSM (G5) and Luna Backup HSM (G5) products.
  • This notice does not apply to the Luna HSM 7 versions. 

After this date, Thales will no longer provide technical support, RMA or equipment repair services, security updates, or software and firmware maintenance for the affected products. 

Have You Made Your Migration Plans? 

If your organization is still running Luna G5 hardware and you have not yet upgraded or established a migration plan, we encourage you to contact your Thales Representative as soon as possible. 

Planning ahead can help you identify the right replacement technology, establish migration timelines, and maintain continuity for applications and systems that depend on your HSM infrastructure. 

Migration Options 

For Luna USB HSM (G5) Customers 

On-Premises – Luna USB HSM U700: The Luna USB HSM U700 provides modern cryptographic capabilities, offline key storage, and broad third-party integrations in a compact form factor. It is particularly well suited for protecting PKI root keys. Learn more about Luna USB HSM U700.  

Cloud – Luna Cloud HSM Services: Available through Thales Data Protection on Demand, Luna Cloud HSM services provide hardware-based HSM security in the cloud while customers retain control of their cryptographic keys. Learn more about Luna Cloud HSM services. 

For Luna Backup HSM (G5) Customers 

On-Premises – Luna Backup HSM B700/B750/B790: The Luna Backup HSM B7xx Refresh supports modern cryptographic capabilities and security standards, with three models to meet different storage requirements. Learn more about Luna Backup HSM. 

Cloud – Luna HSM Backup Services: Available through Thales Data Protection on Demand, Luna HSM Backup provides secure cloud-based backup and restore for on-premises Luna HSMs, supporting hybrid cloud and on-premises environments. Learn more about Luna HSM Backup. 

Enhancements & Improvements in Luna HSM 7 

Both Luna USB HSM 7 and Luna Backup HSM 7 introduced capabilities designed to simplify deployment and support evolving cryptographic requirements: 

  • Flexible authentication: Both products support initialization in either PED mode or Password mode, providing greater flexibility for different deployment environments. 
  • Simplified PED operation: A separate PED terminal is no longer required. PED keys can be inserted directly into the Luna USB HSM 7 or Luna Backup HSM 7. 
  • Post-Quantum Cryptography (PQC) readiness: Luna USB HSM 7 and Luna Backup HSM 7 can be upgraded to support PQC keys and cryptographic mechanisms. With the latest firmware, key transfer, backup, and restore operations can be protected using hybrid PQC ciphers. PQC keys can also be backed up and restored with all partition versions. 

Key Migration Considerations: For FIPS-configured Luna HSM (G5) deployments, keys should be migrated to the Luna USB HSM 7 before upgrading the Luna USB HSM 7 firmware from 7.7.3 to 7.9.2 (see Thales Docs for more details). 

The right migration path will depend on your organization’s architecture, requirements, and operational needs. 

Contact your Thales Representative to discuss your migration options. For additional background, see the original June 2023 EoL/EoS announcement.