Thales is pleased to announce the availability of Luna HSM Software v7.9.2, Firmware v7.10.0, and Universal Client (UC) v10.9.5 for Luna Network and PCIe HSMs. This release introduces expanded post-quantum cryptography (PQC) capabilities, enhanced security controls, and improvements to HSM management and monitoring.
Building on our continued commitment to quantum-safe security, these enhancements help customers prepare for evolving cryptographic requirements while simplifying operations and improving visibility across their HSM infrastructure.
Release Highlights
Advancing the Transition to Post-Quantum Cryptography
As customers transition to PQC, Luna HSMs continue to evolve with expanded capabilities, improved performance, and greater flexibility to support their journey toward quantum-safe security.
Key enhancements include:
- Improved ML-DSA signature performance: Delivers improvements of 50% or more in ML-DSA signature performance, helping customers accelerate post-quantum digital signing operations.
- Microsoft AD CS compatibility: Supports post-quantum PKI deployments with Microsoft Active Directory Certificate Services (AD CS), enabling customers to issue quantum-safe certificates using ML-DSA with Luna HSMs.
- External entropy injection: Enables external entropy to be injected into HSM partitions through the REST API, with access restricted to an authorized role.
- Expanded PQC support in cluster mode: Extends PQC capabilities to Luna HSM cluster mode, allowing customers to use post-quantum cryptography in clustered environments.
Strengthening Security Posture and Access Controls
This release introduces enhancements to help customers maintain strong security practices and manage access to their HSM infrastructure.
- Updated SNMPv3 support: Adds support for modern authentication and privacy protocols, strengthening the security of HSM monitoring communications.
- REST API authentication with RADIUS: Strengthens REST API authentication through RADIUS integration.
Simplifying HSM Management and Automation
To help customers reduce operational complexity, this release introduces improvements that make HSM administration more accessible and easier to automate.
- OpenAPI documentation: Streamlines integration and automation with standardized API documentation for HSM management.
- Enhanced custom role management: Supports the backup and restoration of custom roles, facilitating disaster recovery and helping customers preserve role configurations.
Improving Monitoring and Operational Visibility
New monitoring capabilities provide administrators with greater visibility into HSM configurations and operational health, helping teams proactively manage their infrastructure.
- Network bonding visibility: Allows administrators to check bonding configurations directly through the REST API.
- Battery monitoring: Monitors battery levels to help identify potential maintenance needs.
- Client certificate monitoring: Provides visibility into client certificate attributes, including expiration dates, to support proactive certificate management.
Downloads and Documentation
For full release details, including compatibility requirements and known issues, visit the Customer Release Notes on Thales Docs.
For downloads, visit the Thales Customer Support Portal using the applicable Knowledge Base (KB) articles:
- Luna PCIe HSM Software 7.9.2: KB0031238
- Luna Network HSM Software 7.9.2: KB0031237
- Luna HSM Universal Client 10.9.5 for Windows: KB0031239
- Luna HSM Universal Client 10.9.5 for Linux: KB0031240
- Minimal Luna HSM Universal Client 10.9.5 for ARM64: KB0031243
- Minimal Luna HSM Universal Client 10.9.5 for AIX: KB0031241
- Minimal Luna HSM Universal Client 10.9.5 for Linux: KB0031242
Questions?
Please contact your Thales representative with any questions.