Releases for FIPS 140-2 Level 3 deployments

The following ProtectServer 3 HSM Firmware versions have been released to date for FIPS 140-2 Level 3 deployments:

• ProtectServer 3 HSM Firmware 7.02.04

• ProtectServer 3 HSM Firmware 7.02.03

• ProtectServer 3 HSM Firmware 7.02.02

• ProtectServer 3 HSM Firmware 7.02.01

• ProtectServer 3 HSM Firmware 7.02.00

• ProtectServer 3 HSM Firmware 7.01.02

• ProtectServer 3 HSM Firmware 7.01.01

• ProtectServer 3 HSM Firmware 7.01.00

• ProtectServer 3 HSM Firmware 7.00.01

ProtectServer 3 HSM Firmware 7.02.04

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.02.04 introduces the following new features and enhancements:

Support for a new PIN pad

A new PIN pad can now be used with the ProtectServer 3 HSM for key component entry. For more information about inputting key components with a PIN pad, refer to Key entry via PIN pad.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.02.03

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.02.03 supports the latest features and enhancements introduced with ProtectToolkit 7.2.3, resolves various known issues described in Known and resolved issues, and introduces the following new features and enhancements:

Key migration from ProtectServer 2 HSMs to ProtectServer 3 HSMs using token replication (requires ProtectToolkit 7.2.3)

ProtectServer 3 HSM Firmware 7.02.03 allows users to migrate keys from ProtectServer 2 HSMs to ProtectServer 3 HSMs by replicating the ProtectServer 2 HSM tokens onto the ProtectServer 3 HSMs. This method of key migration must be followed to migrate ProtectServer 2 HSM keys that have their CKA_EXPORTABLE and CKA_MODIFIABLE attributes set to FALSE. For more information, refer to Migrating keys using token replication.

EDDSA cipher object support for FMs (requires ProtectToolkit 7.2.3)

FMs can now use EDDSA cipher objects for signing and verification operations. The FmCreateCipherObject function of the cipher object access API can now construct and initialize these cipher objects. For more information, refer to FmCreateCipherObject.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.02.02

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.02.02 supports the latest features and enhancements introduced with ProtectToolkit 7.2.1 and resolves a known issue described in Known and resolved issues.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.02.01

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.02.01 supports the latest features and enhancements introduced with ProtectToolkit 7.2.1, resolves various known issues described in Known and resolved issues, and introduces the following new features and enhancements:

New values for CKM_AES_KEY_WRAP and CKM_AES_KEY_WRAP_PAD (requires ProtectToolkit 7.2.1)

CKM_AES_KEY_WRAP and CKM_AES_KEY_WRAP_PAD have been assigned new values, as defined in PKCS#11 2.40.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.02.00

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.02.00 supports the latest features and enhancements introduced with ProtectToolkit 7.2.0, resolves various known issues described in Known and resolved issues, and introduces other new features and enhancements:

Larger messages can be exchanged between host applications and functionality modules using FMSC_SendReceive (requires ProtectToolkit 7.2.0)

FMSC_SendReceive now supports messages approximately 64 MB-large. For more information about this function, refer to FMSC_SendReceive.

Enhancements to elliptic-curve algorithms (require ProtectToolkit 7.2.0)

ProtectToolkit 7.2.0 supports ed448 Edwards curves for EC signatures and curve448 Montgomery curves for Diffie Hellman (DH) key derivation. ProtectServer 3 HSM Firmware 7.02.00 supports this enhancement with the following changes:

• CKM_EC_MONTGOMERY_KEY_PAIR_GEN mechanism supported for Montgomery key generation. For more information about this mechanism, refer to CKM_EC_MONTGOMERY_KEY_PAIR_GEN.

• CKM_EDDSA now accepts CK_EDDSA_PARAMS as an optional parameter. For more information, refer to CKM_EDDSA.

CKM_AES_CTR mechanism support (requires ProtectToolkit 7.2.0)

ProtectServer 3 HSM Firmware 7.02.00 supports CKM_AES_CTR. For more information about this mechanism, refer to CKM_AES_CTR.

Advisory notes

This section highlights important issues you should be aware of before deploying ProtectServer 3 HSM Firmware 7.02.00.

CKM_EC_EDWARDS_KEY_PAIR_GEN and CKK_EC_EDWARDS values updated to match PKCS#11 3.0

If you are using ProtectToolkit 7.2.0 or newer with ProtectServer 3 HSM Firmware 7.02.00 or newer, the values of CKM_EC_EDWARDS_KEY_PAIR_GEN and CKK_EC_EDWARDS match PKCS#11 3.0. Thales recommends using the ET_PTKC_GENERAL_LEGACY_EDDSA ProtectToolkit-C configuration item for applications recompiled with ProtectToolkit 7.2.0 or newer, if they were compiled with ProtectToolkit 7.1.0 or older. For more information, refer to ET_PTKC_GENERAL_LEGACY_EDDSA.

ProtectServer 3 HSM Firmware 7.01.02

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.01.02 supports the latest features and enhancements introduced with ProtectToolkit 7.1.0, resolves various known issues described in Known and resolved issues, and introduces other new features and enhancements:

CKA_EXPORTABLE attribute value can be changed from false to true

The value of CKA_EXPORTABLE can be changed from FALSE to TRUE by using the ctkmu m command when the Weak PKCS#11 Mechanisms security flag is set. For more information, refer to ctkmu and Weak PKCS#11 Mechanisms for more information.

Larger messages can be exchanged between host applications and functionality modules using MD_SendReceive (requires ProtectToolkit 7.2.0)

MD_SendReceive now supports messages approximately 64 MB-large. For more information about this function, refer to MD_SendReceive.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.01.01

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.01.01 supports the latest features and enhancements introduced with ProtectToolkit 7.1.0 and ProtectServer 3 HSM Firmware 7.01.00. It also resolves various known issues described in Known and resolved issues, introduces security fixes for certain configurations, and introduces the following new features and enhancements:

Modification to C_DigestKey function

The operation of C_DigestKey has been modified to improve overall security. This function now checks the CKA_MECHANISM_LIST attribute of an object. For more information, refer to CKA_MECHANISM_LIST.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.01.00

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.01.00 supports the latest features and enhancements introduced with ProtectToolkit 7.1.0 and resolves various known issues described in Known and resolved issues.

TR-31 key block format support (requires ProtectToolkit 7.1.0)

ProtectToolkit 7.1.0 introduces limited support for TR-31 key blocks. ProtectServer 3 HSMs can now import and export keys by performing key wrapping and unwrapping using the TR31 key block format. To support this feature, ProtectServer 3 HSM Firmware 7.01.00 supports a new Thales-proprietary key object attribute and three new mechanisms. For more information, refer to the following sections:

• CKA_TR31_INFO

• CKM_UNWRAP_TR31

• CKM_WRAP_TR31_DERIVE

• CKM_WRAP_TR31_VARIANT

New and enhanced ProtectToolkit-C mechanisms (require ProtectToolkit 7.1.0)

ProtectServer 3 HSM Firmware 7.01.00 introduces support for the following new mechanisms:

• CKM_AES_GMAC — new mechanism for single and multiple-part signatures and verification. Refer to CKM_AES_GMAC.

• CKM_AES_GCM_OLD — new mechanism to ensure compatibility between ProtectToolkit 7.1.0 and ProtectToolkit 7.0.0 applications that call CKM_AES_GCM. Refer to CKM_AES_GCM_OLD.

  • To be used with the newly introduced ET_PTKC_GENERAL_LEGACY_GCM configuration item. Refer to ProtectToolkit-C mechanism configuration items.

ProtectServer 3 HSM Firmware 7.01.00 supports enhancements to the following mechanisms:

• CKM_AES_GCM — this mechanism now returns the IV in the mechanism parameter during the C_EncryptInit call. Refer to CKM_AES_GCM.

• CKM_AES_CMAC_GENERAL — this mechanism now uses the values defined in PKCS#11 2.40. Refer to CKM_AES_CMAC_GENERAL.

  • Can be used with the newly introduced ET_PTKC_GENERAL_LEGACY_CMAC configuration item. Refer to ProtectToolkit-C mechanism configuration items.

• CKM_X9_42_DH_DERIVE is now available in FIPS Mode.

Support for a new smart card

A new smart card can now be used with ProtectToolkit 7 to securely back up and restore keys.

Refer to Secure key backup and restoration for more information about key backup/restoration procedures.

Advisory notes

This section highlights important issues you should be aware of before deploying ProtectServer 3 HSM Firmware 7.01.00.

Modifications to ProtectToolkit-C mechanisms

If you are using ProtectToolkit 7.1.0 or newer with ProtectServer 3 HSM Firmware 7.01.00 or newer, the following mechanisms have been modified, to comply with NIST requirements:

• CKM_ECDH1_DERIVE

  The following key derive functions (KDFs) are no longer available when the FIPS Mode security flag is set:

  • CKD_SHA1_KDF

  • CKD_SHA224_KDF

  • CKD_SHA256_KDF

  • CKD_SHA384_KDF

  • CKD_SHA512_KDF

  Refer to FIPS Mode and CKM_ECDH1_DERIVE.

• CKM_SHA1_HMAC and CKM_SHA1_HMAC_GENERAL

  The minimum supported key size in FIPS Mode is 14 bytes. Refer to CKM_SHA1_HMAC and CKM_SHA1_HMAC_GENERAL.

CKM_X9_42_DH_KEY_PAIR_GEN uses CKK_X9_42_DH instead of CKK_DH, to comply with PKCS #11 requirements.

Update to CKA_CHECK_VALUE Attribute

The value definition of CKA_CHECK_VALUE has been updated to match the PKCS#11 standard. For more information about CKA_CHECK_VALUE, refer to CKA_CHECK_VALUE.

FMs compiled with FMSDK 7.1.0 and newer not compatible with older firmware

FMs compiled using FMSDK/CProv 7.1.0 or newer are not compatible with HSM firmware 7.00.xx or older. The FM will fail to load and will be erased from the HSM.

If an FM is intended to run on a ProtectServer 3 HSM with firmware 7.01.xx or newer, use FMSDK 7.1.0 or the version that corresponds with the firmware release to build the FM. If the FM is intended for use with firmware 7.00.xx or older, use FMSDK 7.0.0 to build the FM.

ProtectServer 3 HSM Firmware 7.00.01

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.00.01 is FIPS-validated and supports the latest features and enhancements introduced with ProtectToolkit 7.0.0 and ProtectServer 3 HSM Firmware 7.00.00. It also resolves various known issues described in Known and resolved issues.

Advisory notes

There are no advisory notes for this release.

ProtectServer 3 HSM Firmware 7.00.00

• New features and enhancements

• Advisory notes

New features and enhancements

ProtectServer 3 HSM Firmware 7.00.00 supports the latest features and enhancements introduced with ProtectToolkit 7.0.0. It also introduces the following new features and enhancements to the ProtectServer HSM product line:

New ProtectServer 3 HSM uses the upgraded K7 cryptographic module

Thales is pleased to announce the new ProtectServer 3 line of HSM hardware, utilizing the next-generation K7 cryptographic module. The new HSM provides enhanced performance, functionality equivalent to the ProtectServer 2 HSM product line, and new features as described below. The new HSM is provided in the following variants to serve your deployment needs:

• ProtectServer 3 PCIe HSM: Replaces the ProtectServer PCIe2 (also referred to as the SafeNet ProtectServer PCIe HSM), and is the new K7 cryptographic module installed directly into an application server to provide PKCS#11-compliant cryptographic services.

  Refer to ProtectServer 3 PCIe Hardware Installation.

• ProtectServer 3 External HSM: Replaces the ProtectServer External 2 (also referred to as the SafeNet ProtectServer Network HSM), and includes the new K7 cryptographic module in the chassis, to be installed in a server rack and accessed over a network.

  Refer to ProtectServer 3 External installation and configuration.

• ProtectServer 3+ External HSM: Replaces the ProtectServer External 2 Plus (also referred to as the SafeNet ProtectServer Network HSM Plus), and includes the new K7 cryptographic module installed in a new chassis with enhanced installation, maintenance, security, and usability features:

  • Four 1GB Ethernet ports with port bonding for redundancy and enhanced reliability.

  • A new LCD display provides a quick view of the appliance network configuration and connection health.

  • Two removable hot-swappable power supplies for redundancy and enhanced reliability.

  • Three removable cooling fans for easy cleaning.

  • Optional sliding mount rails provide simplified installation and improved access for performing maintenance and accessing the network ports.

  • Enhanced tamper/decommission logic.

  Refer to ProtectServer 3+ External installation and configuration.

Significant performance enhancements

The ProtectServer 3 HSM provides a large performance boost over the ProtectServer 2 HSM, completing more operations per second than its predecessor in every comparison test. The ProtectServer 3 HSM comes in the following performance level variants, to accommodate a wide range of customer needs:

• ProtectServer 3 HSM PL-25

• ProtectServer 3 HSM PL-220

• ProtectServer 3 HSM PL-3500

Regardless which level you choose, you can expect increased performance and accelerated symmetric/asymmetric cryptography across the board from your new ProtectServer 3 HSM.

Advisory notes

This section highlights important issues you should be aware of before deploying ProtectServer 3 HSM Firmware 7.00.00.

Legacy serial smart card readers not compatible with ProtectServer 3 HSM

Only the Omnikey 3121 USB smart card reader (PN: 911-50002-001) is compatible with the new ProtectServer 3 HSM. Older readers that use a serial connection are not supported.

FMs compiled with FMSDK 5.x not compatible with ProtectServer 3 HSM

FMs compiled using FMSDK 5.x or older are not compatible with ProtectServer 3 HSM Firmware 7.00.00 or newer. To use your FMs with the new firmware, you must recompile them using the ProtectToolkit 7 FMSDK.

Refer to Migrating functionality modules from ProtectServer 2 HSMs to ProtectServer 3 HSMs for more information about recompiling FMs for a ProtectServer 3 HSM.