Luna HSM Firmware 7.4.0

Luna HSM firmware 7.4.0 was released in January 2019.

>Download Luna HSM Firmware 7.4.0 for PCIe HSM

CAUTION!   Versions of the user documentation found on the Customer Portal are no longer updated and may contain errors and omissions. For the most accurate and up-to-date documentation of all major Luna 7 releases, always refer to the latest set of online documentation at https://www.thalesdocs.com.

New Features and Enhancements

Luna HSM firmware 7.4.0 includes the following new features and enhancements:

Functionality Modules

Luna HSM Firmware 7.4.0 introduces Functionality Modules (FMs). FMs consist of your own custom-developed code, loaded and operating within the logical and physical security of a Luna PCIe HSM 7 as part of the HSM firmware. FMs allow you to customize your Luna PCIe HSM 7's functionality to suit the needs of your organization. Custom functionality provided by your own FMs can include:

>new cryptographic algorithms, including Quantum algorithms

>security-sensitive code, isolated from the rest of the HSM environment

>keys and critical parameters managed by the FM, independent from standard PKCS#11 objects, held in tamper-protected persistent storage

To create FMs, you will need the Functionality Module Software Development Kit (SDK), which is included with the Luna HSM Client 7.4.0 software. Applications that use FM functions are supported on Windows and Linux.

CAUTION!   Enabling FMs (HSM policy 50) introduces changes to Luna HSM functionality, some of which are permanent; they cannot be removed by disabling the policy. FM-enabled status is not reversible by Factory Reset. Refer to FM Deployment Constraints for details before enabling.

See About the FM SDK Programming Guide and Functionality Modules for details and procedures.

This feature also requires Luna HSM Client 7.4.0 or newer.

View Utilization Metrics by Partition

View utilization metrics for an individual partition or a specified list of partitions.

See Partition Utilization Metrics for details.

This feature also requires Luna HSM Client 7.4.0 or newer.

Ed25519ph Curve

Luna PCIe HSM 7 firmware version 7.4.0 includes support for the ed25519ph curve variant.

See CKM_EDDSA for details.

Valid Update Paths

You can update the Luna HSM firmware to version 7.4.0 from the following previous versions:

>7.0.3, 7.1.0, 7.2.0, 7.3.0