New Features and Enhancements

SafeNet Luna HSM Client 10.1 introduces the following new features and enhancements:

SafeNet Luna HSM Client 10.1 Supports Both Luna HSMs and DPoD HSM on Demand Services

SafeNet Luna HSM Client can now be used with HSM on Demand services provided by SafeNet Data Protection on Demand. This allows you to migrate keys from a password-authenticated Luna HSM partition to an HSMoD service or vice-versa, set up High-Availability (HA) groups that include both password-authenticated Luna partitions and HSMoD services, and operate your local (Luna PCIe), remote (Luna Network), and cloud (HSMoD) HSM solutions on the same client workstation.

HSMoD client compatibility is limited to Windows and Linux operating systems in this release.

Refer to the following sections:

>Adding a DPoD HSM on Demand Service

>Cloning Keys Between Luna 6, Luna 7, and HSM on Demand

Improvements to G7-based SafeNet Luna Backup HSM Functions

SafeNet Luna HSM Client 10.1 includes the following improvements to G7-based SafeNet Luna Backup HSM functions:

>Automatic backup re-sizing — When you create a new backup, it is automatically re-sized to use the minimum space required to accommodate the backup objects. If the backup HSM becomes full before all of the objects have been successfully cloned, the backup is canceled and an error message is displayed. The new backup partition and all of the objects cloned to that point are deleted from the backup HSM and it reverts to the state it was in prior to the backup operation. In this case you will need to free up some space on the backup HSM or use another backup HSM with more available free space.

See partition archive backup for details.

>Automatic backup naming — If you do not specify a name for the backup partition, a default name is assigned using the format <source_partition_name>_<YYYYMMDD>.

See partition archive backup for details.

>Remote Backup Service (RBS) support for G7 — You can now use the RBS utility included with the SafeNet Luna HSM Client software to set up remote backups using your G7 SafeNet Luna Backup HSM.

See Backup and Restore to a Remote Backup Service (RBS)-Connected G7-Based Backup HSM.

Remote PED Support on Linux

You can now host Remote PED services on a Linux workstation.

See Remote PED Setup.

Client Certificates Signed by a Trusted Certificate Authority

SafeNet Luna HSM Client 10.1 allows you to use client certificates signed by a trusted Certificate Authority (CA), which can be a commercial third-party CA or your organization's own signing station.

See Creating an NTLS Connection Using a Client Certificate Signed by a Trusted Certificate Authority.

Windows 2019 Secure Boot Support

The drivers included with the SafeNet Luna HSM Client software for Luna PCIe HSMs, Luna Backup HSMs, and Luna PEDs now support Windows Secure Boot.