SecureData 7.0.0 supports Utimaco Atalla HSM AT1000 hardware, version 8.50. Before you begin your migration to SDA to 7.0.0, review the SDA migration steps in the Installation Guide and review the HSM integration requirements in Getting Started.
Support for using AES districts with Utimaco Atalla AT1000 HSM version 8.30 was added in SecureData 6.8. The minimum supported versions are SecureData version 6.8 and HSM AT1000 version 8.30.
If you are upgrading or migrating a SecureData appliance with a version older than 6.8, and HSM AT1000 version that is older than version 8.20, you must update SecureData before updating your HSM.
If your SecureData appliance and AT1000 HSM are running newer software than the minimum supported versions, you can update in any order.
To migrate to SecureData 7.0.0 before upgrading AT1000(s) to 8.30 and later:
-
Create backups of your SecureData system and current Atalla AT1000 configuration.
-
Follow migration steps in the Installation Guide to migrate your SDA to 7.0.0.
-
Upgrade your AT1000(s) to version 8.30 (or later version).
-
If it does not already exist, configure an AES MFK (AMK) on the AT1000(s).
-
On the SecureData Management Console, disable and save, then enable and save the Atalla HSM Enabled check box. This is necessary to ensure HSM FEK is being used. On the System > Advanced page, clear the Atalla HSM Enabled check box and click Save Settings, and then select the Atalla HSM Enabled check box and click Save Settings.
-
Deploy the changes. The FEK is now protected by the AT1000 HSM AMK.
For existing SecureData environments being migrated to Version 7.0.0, the AT1000 (s) with software version 8.30 and later require both your existing 3DES MFK to support existing districts and an AES MFK (AMK) for new district creation on SecureData 7.0.0.