Luna SA 4.4.3 - Secure Support - SafeNet

Issue
(76475) Support for
Windows 2008 Server
core?
(76398)
LunaKeyAgreementDh:
Unsupported
generateSecret method
with Java 5
(71997) [docs]
User role list in docs
needs to be updated for
new commands
(71024) Can't list public
keys for created users
(69852) Error when
attempting to start NTLS
with no key/cert
generated
Priority Synopsis
M
L
L
L
L
Problem: Found a problem running the ksputil on Windows 2008 core. This is a
GUI tool; windows core has no GUI.
Workaround: A workaround is to copy "oledlg.dll" from Windows 2008 Server onto
the Server Core version. The dll file is provided on the CD in:
\windows\64\CNG\safenet
Problem: Luna SA 4.4.1 does not support a raw shared secret for Diffie-Hellman
key agreement
Workaround: N/A
Problem: The user role list (user_accounts_and_privileges.htm) needs to be
updated for the new commands included with Luna SA 4.4 (token pcmvisibility,
syslog remotehost, etc.).
Workaround: N/A
Problem: lunash:>sysconf setAdmin publickey list User must be admin, monitor or
operator
Command Result : 65535 (Luna Shell execution)
Functionality is otherwise OK!
Workaround: N/A
Problem: NOTICE: The NTLS service must be restarted for new settings to take
effect. If you are sure that you wish to restart NTLS, then type 'proceed', otherwise ty
pe 'quit'
> proceed
Proceeding...
Restarting NTLS service...
Stopping ntls:
[ OK ] Error opening Certificate
/usr/lunasa/vts/server/server.pem 30136:error:02001002:system library:fopen:No
such file or directory:bss_file.c:2 78:fopen('/usr/lunasa/vts/server/server.pem','r')
30136:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280: unable to
load certificate
Workaround: ALWAYS generate the server certificate BEFORE attempting to start
NTLS.
Luna SA 4.4.3 Customer Release Notes 007-011327-001 Revision E Copyright 2009-2012 SafeNet Inc. 10