Customer release notes for ProtectDB v8.8 Oracle are now available for download. These releases include the following enhancements:

ProtectDB Oracle 8.8     

TLS Support

• Support for TLS v1.1 and TLS v1.2

Oracle 12c Non-Container Database (CDB) Support

• Support added for ProtectDB installation on Oracle 12c non-container database.

Secure Channel Support from SafeNet KeySecure to Oracle Database

• Support for SSL protocol when connecting SafeNet KeySecure to Oracle database

Download Customer Release Notes and other information.*

Please review the Advisory Notes and the Resolved and Known Issues sections of the release notes for any limitations and/or restrictions.

*Note: Registered users may access the documents via the Gemalto Support Portal. Should you need assistance logging in, please contact the SafeNet Support team at 800-545-6608 (US customers) or +1 410-931-7520 (International customers).

Customer release notes for SafeNet ProtectApp v8.8 for JCE, .NET, and ICAPI are now available for download. These releases include the following enhancements:

SafeNet ProtectApp v8.8 JCE

Encryption/Decryption with an EC Key:

• User can now perform encryption-decryption with the EC keys and ECIES algorithms in the local and remote modes

Creating an AES Key Using HKDF Algorithm:

• Support for creating an AES key (from another AES key) using HMAC-based Extract-and-Expand Key Derivation Function (HKDF). 

Wrapping with an AES Key

• Support for wrapping an AES key (key-size of 128, 196, and 256) with an AES key (key-size of 128, 196, and 256). 

Session-Pool Caching

• Support for caching user session-pool is added in SafeNet Cloud Storage Encryption Gateway for Amazon Simple Storage Service (Amazon S3), so that no new session is created for the particular user until the user-session is cached.

  Download Customer Release Notes and other information.*    

SafeNet ProtectApp v8.8 .NET

Encryption and Decryption Support Using EC keys in Remote and Local modes.

• User can now perform encryption-decryption with the EC keys and ECIES algorithms in the local and remote modes

Support of HMAC Key Derivation Function.

• An AES symmetric key can be derived from another symmetric key, also called a Master Key based on the HKDF (HMAC based key derivation function).

Derive AES key

• Create a derived AES key from the master symmetric key in SafeNet KeySecure.

Export Wrapped AES Key from SafeNet KeySecure

• The ExportAESWrappedKey exports key bytes of an AES key in wrapped form. Users can also wrap specific versions or all versions of a versioned key using AES Key wrapping.

Support of SSL in Syslog

• Server authentication - Involves client-side server authentication by verifying signed server certificate with CA
• Client authentication - Involves server-side authentication by verifying signed client certificate with CA

Enhancements in FPE for Cardinality 26 and 62 in Local Mode

• All the outside cardinality characters will be preserved. IV will be ignored if input data length does not require IV

  Download Customer Release Notes and other information.*

SafeNet ProtectApp v8.8 ICAPI

Encryption and Decryption Support Using EC Keys in Remote and Local modes.

• User can now perform encryption-decryption with the EC keys and ECIES algorithms in the local and remote modes

AES Key Wrapping

• Users can exports key bytes of an AES key in wrapped form. These keybytes are wrapped with other AES keys. Users can also wrap specific versions or all versions of a versioned key using AES key wrapping

Support of SSL in Syslog

• Server authentication: Involves client-side server authentication by verifying signed server certificate with CA
• Client authentication: Involves server-side authentication by verifying signed client certificate with CA

Support of HMAC Key Derivation Function

• An AES symmetric key can be derived from another symmetric key, also called as Master Key based on the HKDF (HMAC based key derivation function)

Enhancements in FPE for Cardinality 26 and 62 in Local Mode

• All the outside cardinality characters will be preserved. IV will be ignored if input data length does not require IV

  Download Customer Release Notes and other information.*

Please review the Advisory Notes and the Resolved and Known Issues sections of the release notes for any limitations and/or restrictions.

*Note: Registered users may access the documents via the Gemalto Support Portal. Should you need assistance logging in, please contact the SafeNet Support team at 800-545-6608 (US customers) or +1 410-931-7520 (International customers).

As part of our ongoing product communication, we are announcing End-of-Sale for iKey 1000/1032 and providing End-of-Sale Reminder for IDBridge K3000.

iKey 1000/1032  -  End-of-Sale Key Dates 

For replacement products and additional details please refer to the End-of-Sale announcement

IDBridge K3000- End-of-Sale Reminder

Effective as of April 3, 2018, Gemalto will selling the following product to customers and it will no longer be available for purchase, for more details please refer IDBridge K3000 End-of-Sale announcement.

We are pleased to announce that SafeNet Trusted Access (STA) has been updated with the following feature:

Filter Logs by Dates: Users can apply a date range filter when viewing the STA Access Logs and Audit Logs, to display only logs within the specified date range.

 For additional details, please refer to KB0016061 in the Customer Support Portal.

Gemalto is pleased to announce that SafeNet KeySecure version 8.9.0 is now available for the following physical appliances:

• SafeNet KeySecure k460 (R320 and R330 chassis)
• SafeNet KeySecure k450 (R320 and R330 chassis)
• SafeNet KeySecure k250

Virtual deployments are also available through SafeNet Virtual KeySecure on AWS and VMware.

Below are new feature enhancements available in the SafeNet KeySecure 8.9.0 release:

Support for Cluster Replication: Enables customers to configure cluster retry interval, and cluster retry attempts using the newly added CLI commands.

Support for PED version 2.8.0-1

Support for First Key Version Using the NAE-XML Interface: The ‘Key Version State’ command has been added in the NAE-XML interface, which enables customers to set the initial state as Active, Restricted, or Retired for the first key version, while creating a versioned key.

Set Key Rotation While Creating Keys: Customers can set key rotation while creating versioned key in the SafeNet KeySecure Management Console. SafeNet KeySecure has added three CLI commands to enable, disable, and view the status of the key rotation feature.

Support of Subject Alternative Name Field in SSL Certificates: A new optional field titled ‘Subject Alternative Name’ has been added in the SafeNet KeySecure Management Console. When performing a new installation, the ‘Subject Alternative Name’ field is available in the Web Admin Certificate. While upgrading from older version of SafeNet KeySecure to SafeNet KeySecure v8.9.0, this field is not available in the Web Admin Certificate. However, customers can create the Web Admin Certificate with a default ‘Subject Alternative Name’ either from the SafeNet KeySecure Management Console or CLI.

For a full list of product enhancements and issues resolved in this release, please refer to the customer release notes available on the Gemalto Customer Support Portal: KB0017269 KeySecure 8.9.0 Appliance Customer Release Notes

This release is compatible with the following SafeNet Data Protection portfolio client platforms and versions:

• ProtectFile-Linux 8.7.1 and 8.8.0
• ProtectFile-Windows 8.8
• ProtectDB SQL Server 8.9.0
• ProtectDB Oracle 8.8.0
• ProtectDB DB2 8.7.0
• ProtectDB Teradata 8.5.0
• ProtectApp-JCE 8.9.0
• ProtectApp-.Net 8.9.0
• ProtectApp-ICAPI 8.9.0
• Tokenization Manager 8.8.0
• SafeNet ProtectV

Older versions of the SafeNet client platforms are also expected to work with SafeNet KeySecure 8.9.0.

For a full list of supported upgrade and migration paths for customers, please read the customer release notes, available on the Gemalto Customer Support Portal.

*Note: Registered users may access the documents via the Gemalto Customer Support Portal. New users can visit the customer registration page to create an account.

We are pleased to inform you that SafeNet Authentication Service Agent for Cisco AnyConnect 2.2.0 is now available. 

This updated version resolves some known issues and features the following enhancements:

• Support for Cisco AnyConnect latest client versions 4.3 (inherited from agent v2.1.0), 4.4 and 4.5
• Gemalto rebranding
• Support for Windows 10
• Security enhancements

Installation and configuration instructions, along with the agent itself, can be downloaded from the Gemalto Customer Portal KB0017305.

We are pleased to announce that SafeNet Trusted Access (STA) has been updated with the following feature:

User Portal (Launchpad): Portal from which end users can view a list of their applications and access them with a simple click. A Single-Sign-On session is initiated when logging into the user portal. This allows users to access their applications seamlessly from the Portal, requiring additional authentication only when needed as specified by the policy.         

For additional details, please refer to KB0016061 in the Customer Support Portal.

Our latest SafeNet Luna Pin Entry Device (PED)  has now been released, enabling remote or local management of SafeNet Luna HSM security administration functions. The latest refresh maintains the same look and functionality as its predecessor including the highest levels of security through FIPS 140-2-validated two-factor authentication, and is USB-powered for easy set up (note that a power adapter is no longer shipped or required). Moving forward, only this new PED will be available (model #: PED-06-0001, shipping with firmware version 2.8 from the factory), and older models have been sunsetted.

For additional information, please download the current product brief, or contact your Gemalto Sales Representative.

We are pleased to announce that SafeNet Trusted Access (STA) has been updated with the following features:

• Advanced Configuration Settings for Applications: Allows configuration of advanced settings for SAML applications in STA. These advanced settings include signature options, NameID field format, encryption options, and more...This feature significantly broadens the range of applications that can be configured in STA and is available with the Generic Template.                                      

• Filter Access Logs by User: Allows to apply a filter when viewing the STA Access Logs or STA Audit Logs to display only the logs of a specific user.

For additional details, please refer to KB0016061 in the Customer Support Portal.

We are pleased to announce that SafeNet MobilePASS+ SDK v1.0.1 for iOS and Android is now available.

This first release of SafeNet MobilePASS+ SDK brings the following new features:

• Easy Token Management to enable listing and deleting tokens
• Token Enrolment to support policies for Token with no PIN, Server PIN, User PIN and Biometric PIN
• OTP (One Time Password) Generation to generate Passcodes according to token policy
• PIN Protection of User PIN through secure component ACS (Asset Comparison Service)

Delivery packages can be downloaded from the Gemalto Customer Portal as follow:

SafeNet MobilePASS+ SDK v1.0.1 for iOS KB0017237
SafeNet MobilePASS+ SDK v1.0.1 for Android KB0017238