Luna SA 4.1.1 - Secure Support - SafeNet

Luna SA VersionReason for Update3.0.1 Remote Administration allows a Remote Admin source Luna SA appliance to provide theauthentication data (PED Keys) for a distant (target) appliance, so that the Administrator doesnot need to be present, with PED Keys, at the remote location when performing administrationtasks that require HSM or Partition login.The hsm showPolicies display now shows the HSM Admin’s login status and the HSM’s M of Nstatus.Two new commands added: sysconf appliance reboot and sysconf appliance poweroff.Public Key Authentication featureJava support of JRE 1.3 and 1.4 (note that release 2.3, below, where this feature is alsomentioned, is a separate product branch)3.0 SIM enhanced to work with token objects, as well as session objects; additional authenticationmethods supported (PED, M of N)Crypto Officer / Crypto User roles addedOAM&P introduced, with SNMPsupport for 64-bit SolarisECC, ECDSA and KCDSA algorithms supportedSSL 0.97c adopted to address security vulnerability in previous version2.3 This release brought some 3.x functionality back to the 2.x series, for customers who require FIPSvalidation“Keep Alive” function added, to cope with inactivity timeouts imposed by intervening firewallsFix for Luna SP with Windows 2003 “Key Archival”Constraints on characters that can be used in Client names and PartitionsJava support of JRE 1.3 and 1.4OpenSSL version 0.96m2.2.3 added verify command to lunash command set, to perform a file check operation on the Luna SAto provide assurance that the system files are consistent with the original factory2.2.2 root account no longer availablesysconf cleanup subcommand added2.2.1 Apache integrationIBM WebSphere integrationntp supportselective logging functionalityclient authentication with IIS and CAPI now worksJava now supported on HP-UXJava Multiple Keystores (API) supportedLuna SA 4.1.1 Customer Release Notes 007-010109-001 Revision G Copyright 2007-2012 SafeNet Inc. 6