Unsupported KMIP header values in request messages: MaximumResponseSize, AsynchronousIndicator, AttestationCapableIndicator, and AttestationType now cause FEATURE_NOT_SUPPORTED errors if given. ClientCorrelationValue, ServerCorrelationValue, and TimeStamp only cause warnings for compatibility reasons.

Unsupported KMIP attributes in request messages: ProtectionStorageMask and QuantumSafe cause UNSUPPORTED_ATTRIBUTE errors if given.

When an illegal Authenticated Encryption Tag length is given during a symmetric Encryption and Decryption operation, the result reason is now GENERAL_FAILURE instead of INVALID_FIELD.

When an IV Counter Nonce isn’t given during a symmetric Encryption and Decryption operation, the result reason is now INVALID_MESSAGE instead of ILLEGAL_OPERATION.

if objects are deleted but not in pre-active, deactivated or compromised state,

if the activation date of an object that is not in pre-active state is modified, and

if the process start date of an object that is not in pre-active or active state is modified, or it is set before the activation date or the current time.

Support of swagger interface, call via <BaseURL of crypto api >kms-crypto-api/swagger-ui/index.html

Support of PQC, specifically SLH-DSA and ML-DSA algorithms and their pre-hash variants, see Post-Quantum Cryptography Algorithms.