Voltage SecureData Server Customer Advisory


Original Question: Voltage SecureData Server Customer Advisory by raquelwinkler

Voltage SecureData Server

Customer Advisory

December 10, 2018

Appliance upgrade can result in a software protected Field Encryption Key


Appliance upgrade results in a software protected Field Encryption Key despite the presence of a configured HSM


When applying a SecureData Appliance upgrade, the upgrade script makes a backup of the existing management configuration database, and restores the backup after application of software updates. 
After restoration of the backup, the configuration database has sensitive data secured via the Field Encryption Key (FEK).  Systems with Hardware Security Modules (HSMs) enabled protect the FEK with an HSM, otherwise the FEK is protected with a software derived key.
The upgrade process can result in a software derived FEK, even when an HSM is available.  This applies only to upgraded systems configured with HSMs.  Fresh installs of SecureData Appliance are not subject to this issue.


For appliances configured with HSMs, upgrade to SecureData Appliance version 6.6.1:  the new upgrade script corrects the FEK protection to use the HSM if available. 

Alternatively, apply the following workaround to HSM configured Voltage SecureData Management Console:

From the management console (“Systems->Advanced” settings):

  1. disable HSM support,
  2. save settings,
  3. re-enable HSM support,

save settings (No deploy is necessary, and this will result in an HSM derived FEK).


Products Affected:
Voltage SecureData Management Console – all versions


Obtaining Support:
If you require technical assistance with this issue, please contact Micro Focus Voltage Customer Support

(Phone) https://softwaresupport.softwaregrp.com/web/softwaresupport/document/-/facetsearch/document/KM00006

(Chat) https://softwaresupport.softwaregrp.com/web/softwaresupport/chat-language-selection

(MySupport Web Portal) https://softwaresupport.softwaregrp.com/

(Internet) https://www.microfocus.com/support-and-services/contact-support/

Date: December 10, 2018

Document ID: MF-VOLT-CA-201806

Comment List
Related Discussions