We are pleased to inform you that SafeNet Authentication Service Agent for Windows Logon (WLA) 2.2.6 is now available. 

This is a maintenance release that resolves known issues.

Installation and configuration instructions, along with the agent itself, can be downloaded from the Gemalto Customer Portal KB0017533

We are pleased to announce that the SafeNet MobilePASS+ app for Windows and SafeNet MobilePASS+ 1.6.1 for Android are now available.
These releases bring the following features:

SafeNet MobilePASS+ app for Windows – Version 1.1

• Authentication with choice of standard OTP or push mode
• Token enrollment with support for multiple policies including Token with no PIN, Server PIN, User PIN
• Support for broad choice of standard OTP algorithms (HOTP, TOTP, OCRA)
• Support for desktop, tablet and phones running Windows 10 or later
• Modern and user friendly design aligned with iOS and Android versions

SafeNet MobilePASS+ for Windows can now be downloaded from Microsoft's App Store.

For the SafeNet MobilePASS+ for Windows 1.1 User Guide, please refer to the Gemalto Support Portal (KB0017535).

SafeNet MobilePASS+ 1.6.1 for Android

SafeNet MobilePASS+ 1.6.1 for Android is now available for download from Google Play.

This is a maintenance release that resolves several known issues.

We are pleased to announce that SafeNet Trusted Access (STA) has been updated with the following feature:

Customization of the STA Console Login UI : Users can now customize operator's visual attributes of the login user interface such as company logo customization, background image and colors.

These visual attributes are available for operators when logging in to the STA administration console and are managed through a user friendly interactive UI.

For additional details, please refer to KB0016061 in the Customer Support Portal.

We are very pleased to announce that SafeNet Luna HSM 7.2 is now available for download. The 7.2 release is focused on improving the ease of management of SafeNet Luna Network HSM deployments. Of special note is the availability of a minimal client designed to support container-based environments (Docker, etc.) and the introduction of a common client that is backwards and forwards compatible enabling HSM deployments upgrades with much less effort. In addition, the SafeNet Luna HSM 7.2 release will include FW 7.0.3 (and FW 7.0.2 for F5) which are in the final stages of FIPS validation.

Please note that there are two separate appliance update packages associated with the SafeNet Luna HSM 7.2 release:

1. SafeNet Luna Network HSM 7.2 appliance software, with update to firmware 7.0.3

• FIPS-validated firmware; customers wanting to run FIPS-validated firmware must upgrade to software version 7.2.
• Firmware 7.0.3 is Gemalto's newest FIPS candidate for SafeNet Luna HSM 7
• If you require firmware 7.0.3, customers MUST upgrade appliances to software version 7.2
• F5 customers (only) wanting to run FIPS-validated firmware must run 7.0.2 on SafeNet Luna HSM 7.1 (refer to the F5 website for the latest compatibility matrix)

2. SafeNet Luna Network HSM 7.2 appliance software, with update to firmware 7.2.0

•  Select this update if you do NOT require FIPS-validated firmware and/or require the bug fixes from the newer version

NEW IN THIS SAFENET LUNA HSM 7.2 / FIRMWARE 7.0.3 AND 7.2.0 RELEASE:

GEMALTO SUPPORT PORTAL DOWNLOAD INFORMATION

QUESTIONS

Please download the SafeNet Luna Network and PCIe HSM product briefs or contact your Gemalto Representative.

We would like to inform you that SafeNet Authentication Service (SAS) Agent for Microsoft Network Policy Server (NPS) v 2.1.1 is now available.

This release is applicable to SafeNet Authentication Service – Cloud Edition and SafeNet Authentication Service PCE.

This new version features security enhancements and resolves known issues.

 Installation and configuration instructions, along with the agent itself, can be downloaded from the Gemalto Customer KB0017510

We are pleased to announce that SafeNet Trusted Access (STA) has been updated with the following feature:

Read-only Permission for STA Operators: Customers can configure operator roles with read access permission to the STA console.

This type of role configuration can be usable for help desk support teams who need to access users’ data, access logs, policy configuration and application configuration in the STA console, but are not required to make changes to policy or application configurations.

For additional details, please refer to KB0016061 in the Customer Support Portal.

This release is an upgrade that brings some enhancements in security, performance, and functionality:

- Easier DCV implementation: CAS v7.7 now supports DCV cards that derive their keys from a master key stored on SafeNet Payment HSM. CAS v7.7 enables one-step provisioning of these cards, with a batch file.

- Simpler device identification process: Instead of defining internally how to differentiate between one user’s multiple devices, banks can now let end users do this (e.g. enter device name or model) and store the information in CAS. The information will then be presented in the admin portal.

- Provisions batches more quickly: CAS v7.7 provisions faster in batch mode – thanks to a new engine with faster XML parsing.

- Brings more flexible rights management for batch provisioning features: CAS v7.7 now has a more granular privilege system for batch provisioning operations, with three extra privileges for each batch provisioning type instead of one for all types.

Feel free to contact your support team or account manager to find out more!

Gemalto is pleased to announce the release of SafeNet ProtectToolkit 5.6, which extends the functionality and utility of SafeNet ProtectServer HSMs. SafeNet ProtectToolkit 5.6 is compatible with SafeNet ProtectServer Network HSM, Network HSM Plus, and PCIe HSM. Release 5.6 provides the following new features and enhancements:

• Support for SHA3 Hash Algorithms
  SafeNet ProtectToolkit 5.6 provides new mechanisms that use the SHA3 standard. This firmware supports the latest features from release 5.6. The following new mechanisms are available in firmware 5.03.00:
  • CKM_AES_GCM
  • SHA3 Signing mechanisms:
    • CKM_SHA3_224_RSA_PKCS
    • CKM_SHA3_256_RSA_PKCS
    • CKM_SHA3_384_RSA_PKCS
    • CKM_SHA3_512_RSA_PKCS
    • CKM_SHA3_224_RSA_PKCS_PSS
    • CKM_SHA3_256_RSA_PKCS_PSS
    • CKM_SHA3_384_RSA_PKCS_PSS
    • CKM_SHA3_512_RSA_PKCS_PSS
    • CKM_ECDSA_SHA3_22
    • CKM_ECDSA_SHA3_256
    • CKM_ECDSA_SHA3_384
    • CKM_ECDSA_SHA3_512
  • SHA3 Hashing mechanisms:
    • CKM_SHA3_224
    •  CKM_SHA3_256
    • CKM_SHA3_384
    • CKM_SHA3_512
  • SHA3 HMAC mechanisms:
    • CKM_SHA3_224_HMAC
    • CKM_SHA3_224_HMAC_GENERAL
    • CKM_SHA3_256_HMAC
    • CKM_SHA3_256_HMAC_GENERA
    • CKM_SHA3_384_HMAC
    • CKM_SHA3_384_HMAC_GENERAL
    • CKM_SHA3_512_HMAC
    • CKM_SHA3_512_HMAC_GENERAL
  • SHA3 Key derivation mechanisms:
  • • CKM_SHA3_224_KEY_DERIVE
    • CKM_SHA3_256_KEY_DERIVE 
    • CKM_SHA3_384_KEY_DERIVE
    • CKM_SHA3_512_KEY_DERIVE
• Support for PKCS#11 v.2.30-Compliant AES-GCM:  SafeNet ProtectToolkit 5.6 supports the Galois/Counter Mode (GCM) option with AES, in compliance with NIST SP 800-38D.
• PSESH Admin Account Recovery:  As a security measure, the admin account is locked out after 10 consecutive failed console login attempts. New ProtectServer Network HSMs that are shipped with appliance image 5.6 and above will allow the admin user to recover the account, without assistance from Gemalto, by zeroizing the HSM. The admin user can also reset passwords for the audit as well as the pseoperator user. Consult the product documentation for these procedures.
• Updates to OpenSSL and OpenSSH:  SafeNet ProtectToolkit 5.6 contains security updates to OpenSSL and OpenSSH.
• Kernel Updates Addressing Spectre/Meltdown Vulnerabilities:  The SafeNet ProtectServer Network HSM and SafeNet ProtectServer Network HSM Plus appliance kernels have been updated to address the Spectre and Meltdown vulnerabilities in Intel® processors.
• Upgraded CPU in SafeNet ProtectServer Network HSM:  As part of our policy of continuous improvement, new SafeNet ProtectServer Network HSMs contain an upgraded Intel® Atom™ CPU E3827 1.74 GHz processor. These models have appliance software version 5.4 and HSM firmware 5.02.00 installed at the factory, and ship with SafeNet ProtectToolkit 5.5. You can download the latest software from the Customer Support Portal. If you require FIPS-validated firmware immediately, download and install firmware version 5.00.02.

Please go to the SafeNet Support Portal**to download the release notes - details as follows:

• Release notes - Doc part number 007-007171-017 Rev. A
• 610-009981-020 SW,PTK 5.6 (PTK-C;PTK-J;PTK-M) - Doc ID: KB0017437 /  DOW0002840
• 007-013682-004 DOCUMENTATION,PTK 5.6 - Doc ID: KB0017435 / DOW0002841
• 621-000097-014 FW UPGD,PSIE V 5.03.00 - Doc ID: KB0017436 / DOW0002842 

**Log in required.  Contact CustomerPortalSupport@Gemalto.com for assistance.

Gemalto is pleased to announce the release of version 2.2.2 of the Luna EFT Payment HSM.

This release of Luna EFT Payment HSM introduces key features expanding the software's capabilities in terms of scalability and flexibility, including:

• eToken Cloning - This release allows you to clone existing initialized eTokens. eToken Owner can clone Activation, Admin, Auditor and Partition eTokens.
• DCVV Host Functions for Visa, Discover and Optelio Schemes - This release of Luna EFT provides support for generating/verifying Dynamic Card Verification Value (DCVV) for Visa, Discover and Optelio schemes. The following host functions are added in this release:     

•  TLS Cipher Suite Support - The following cipher suites are now supported - ciphers marked with asterisk (*) are enabled by default:

o ECDHE-RSA-AES256-GCM-SHA384*

o ECDHE-RSA-AES128-GCM-SHA256*

o DHE-RSA-AES256-GCM-SHA384*

o ECDHE-RSA-AES128-SHA256

o AES256-GCM-SHA384

o AES128-GCM-SHA256

Please go to the SafeNet Support Portal** to download the release notes  (use Document Number: 007-012703-006, Rev. A). The EFT 2.2.2 software release can also be downloaded (use Document Number: KB0017422).

**Log in required.  Contact CustomerPortalSupport@Gemalto.com for assistance.

Alerts Management feature now available
With SafeNet Crypto Command Center version 3.3 Administrators can now access a Dashboard for a quick overview of critical device activity and service availability. Additionally, Administrators can configure Notifications, alerting users via email of critical SafeNet Crypto Command Center events.

For additional information download the SafeNet Crypto Command Center Product Brief.