Skip Navigation

Date: Jun 2021
Posted by: Alison Maine

June 30, 2021

The FIPS 140-2 certification of the Luna T7 Cryptographic Module and the corresponding release of the Luna T-Series HSMs allows Thales Trusted Cyber Technologies (TCT) to begin the process of retiring the Luna for Government products. Thales TCT is announcing the End-of-Sale (EOS) and End-of-Life (EOL) timeline for the following Thales TCT products:

  • Luna SA for Government. The Luna SA 1700 and Luna SA 7000 model HSMs. These network HSM models include the legacy Luna K6 Cryptographic Module running Thales TCT firmware.
  • Luna PCI-E for Government. The Luna PCI-E 1700 and 7000 models are the products consisting of the standalone Luna K6 Cryptographic Module running Thales TCT firmware.

End-of-Sale and End-of-Life Timeline
The following table describes the End-of-Sale (EOS) and End-of-Life (EOL) milestones, dates, and definitions for the Luna SA for Government and Luna PCI-E for Government products. The last day to order the affected products is December 31, 2021.

Milestones Dates Description
EOL Announcement to Customers 30-June-2021 Customers informed about End-of-Life. Product moves to Maintenance Mode – only minor enhancements, security and bug fixes available from this date.
Last Time Buy 31-Dec-2021 Affected products  removed from the Sales Catalog, and not sold after this date.
END-OF-SUPPORT and END-OF-LIFE of Luna for Government 31-Dec-2023 Affected products no longer supported.

Migration Strategy
The Luna T-Series HSMs include the following features to allow easy migration from the legacy Luna for Government models to the new T-Series models:

  • Compatible with applications integrated with Luna HSM for Government
  • Multiple techniques to migrate high value keys to T-Series HSMs
  • Allows for an incremental deployment model to roll out Luna T-Series

Professional Services offerings specifically designed to assist customers in migrating to Luna T-Series HSMs are available.

For more information on migration options or any other questions, please contact your Thales TCT account manager or

About Luna T-Series HSMs
Thales TCT Luna T-Series HSMs are the choice for government agencies when storing, protecting and managing cryptographic keys used to secure sensitive data and critical applications. Meeting government mandates for U.S. Supply Chain, the high-assurance, tamper-resistant Luna T-Series HSMs are designed, developed, manufactured, sold, and supported in the United States.

Affected Products List
The Thales TCT part numbers affected by this announcement are included in the following table.

Part Number


Luna SA HSMs for Government



Luna SA 1700,PW-AUTH,2 HSMP,CKE,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 1700,PW-AUTH,2 HSMP,CL,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 1700,PED-AUTH,2 HSMP,CKE,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 1700,PED-AUTH,2 HSMP,CL,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 1700 Local PED Bndl (Luna SA, Local PED, 20 PED keys, Backup HSM)


Luna SA 1700 Remote PED Bndl (Luna SA, Remote PED, 20 PED Keys, Backup HSM)


Luna SA 7000,PW-AUTH,2 HSMP,CL,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 7000,PED-AUTH,2 HSMP,CL,SW 5.4.7,FW6.10.9/6.21.2


Luna SA 7000 Local PED Bndl (Luna SA, Local PED, 20 PED keys, Backup HSM)


Luna SA 7000 Remote PED Bndl (Luna SA, Remote PED, 20 PED keys, Backup HSM)

Luna PCI-E HSMs for Government



Luna PCI-E-1700,PW-AUTH,CKE,SW 5.4.7,FW 6.10.9/6.21.2


Luna PCI-E-1700,PW-AUTH,CL,SW 5.4.7,FW 6.10.9/6.21.2


Luna PCI-E-1700,PED-AUTH,CKE,SW 5.4.7,FW 6.10.9/6.21.2


Luna PCI-E-1700,PED-AUTH,CL,SW 5.4.7,FW 6.10.9/6.21.2


Luna PCI-E-7000,PW-AUTH,CL,SW 5.4.7,FW 6.10.9/6.21.2


Luna PCI-E-7000,PED-AUTH,CL,SW 5.4.7,FW 6.10.9/6.21.2

Luna Credential HSM

(This is LCS using SA5. LCS using T-Series is not affected)


Luna Credential HSM


Luna Credential HSM, PED AUTH

Luna Network HSM (v7.10)

(Limited release of T7 embedded in Luna SA for Govt appliance)





Posted by: Alison Maine

Thales Trusted Cyber Technologies (TCT) is pleased to announce the release of the Luna HSM firmware 6.21.6 and Luna Client 7.11.2. The 6.21.6 firmware update is specific to Luna PCIe HSM for Government (K6), Luna SA for Government, G5 HSM, and Backup HSM (collectively called “Legacy HSMs”). With this release cloning, partition backup and restore, and HA synchronization operations can be performed between a FIPS enabled 7.11.1 T-Series HSM and Legacy HSMs. The 6.21.6 firmware also includes additional security enhancements relevant to the Legacy HSMs. Updates to the Luna Client (7.11.2) are also included to address functional and usability enhancements.

This site uses cookies to store information on your computer. Some are essential to make our site work properly; others help us improve the user experience.

By using the site, you consent to the placement of these cookies. For more information, read our cookie policy and our privacy policy.