For the latest version, please use Key Management System 3.9.2!

Release 3.1.0

Bugfixes

  • MTG KMS-Server

    • Fixed deletion of a tenant.

    • Added missing audit events for user management.

  • MTG KMS-UI

    • Fixed bug of triggering the Crypto search request twice on advanced search submission and reset in KMS Crypto UI.

    • Fixed bug of not refreshing Keycloak access token after its expiration.

    • Fixed bug of navigating back from the Crypto Certificate details page using the History API in KMS Crypto UI.

    • Fixed bugs related to selecting a file in the Import Certificate page in KMS Crypto UI.

    • Fixed bug for the synchronization and fetching of CAs in KMS Admin UI.

    • Fixed bug of deletion of a KEK and removal of a Protected KEK’s HSM Profile when the HSM is not available in KMS Tenant UI.

    • Fixed bug of overflowing on mobile screens when the logged-in user has a long name.

    • Fixed bug of missing warning message when a protected KEK has only one connected HSM Profile in KMS Tenant UI.

Features and updates

All MTG Java Application Projects

List of all MTG Java Application Projects see [MTG_ERS_JAVA].

  • Spring boot version increased to 2.7.11 (includes tomcat 9.0.74).

  • MTG KMS-Server

    • Added new MTG-Specific Reactivation operation.

    • Adapt Kmip Objects and Operations document to Ascii doc.

    • Support of Locate Digest.

    • Added description of max_packet_size for Apache configuration in the installation manual.

    • Added a Note for configuration to the KeyCloak Server as it is optional, in the installation manual.

    • Added a Note in the installation manual that the failover mode of the CXI Utimaco interface is not supported.

    • Additional support of SHA_512_224, SHA_512_256, SHA3_224, SHA3_256, SHA3_384 and SHA3_512 for RSA PSS Signature.

    • Added fasterxml Version 2.14.2

    • Added Managed object attribute Nist-Key-Type.

    • Added Support of LUNA HSM with FIPS mode.

    • Added new configurable audit messages for KMIP operations.

    • Added disjunct search of attribute ObjectTypes via Locate operation.

    • Providing endpoints for the system monitoring. See Installation Manual chapter "System monitoring". For the provision of the system monitoring endpoints, basic authentication can be activated. To do this, enter the parameters in application.properties. See installation manual chapter "System monitoring basic authentication properties".

MTG KMS-PKCS#11-Library

  • none

MTG KMS-UI

  • Nuxt 3 & Vue 3 migration.

  • Added the reactivation option of a Cryptographic Object in KMS Crypto UI.

  • Added a button for enabling/disabling the reactivation in a tenant in KMS Admin UI.

  • Added a new column (description) in the Tenant Clients table page in KMS Tenant UI.

  • Added the function of enabling/disabling the Audit messages for specific KMIP operations in the Tenant details page in KMS Admin UI.

  • Disabled the submission of a Certificate when none has been set in KMS Crypto UI.

  • Improvements related to the edit Certificate Name of a Certificate in KMS Crypto UI.

  • Improved the warning message during CAs table synchronization when the mini-CA is not available or misconfigured in KMS Admin UI.

  • The nuxt/auth (@nuxtjs/auth-next) was replaced by the keycloak-js dependency.

  • Removed moment, nuxt-clipboard2, v-calendar, vue-papa-parse, consola and buffer dependencies.

  • Replaced the bootstrap-vue with the internally developed library @mtg/ers-ui-utils.

Installation instructions

  • MTG KMS-Server

    • For the following Features a database migration with flyway will be done automatically:

      1. Reactivation operation

      2. Nist-Key-Type

      3. New configurable audit messages for KMIP operations

      4. LUNA FIPS mode