Long Term Support (LTS) Releases
nShield LTS software releases are full GA releases of Security World Software releasing an update for all supported HSM products (Connect image and firmware) and the client-side software. This release will then be maintained and updated over an extended period of time to help establish product stability and provide an extended period of customer support. By default, we recommend that customers use LTS releases to ensure long-term stability.
nShield LTS Features
The nShield LTS releases will have the following benefits:
Regular Updates
After the initial release of the LTS release, subsequent updates to that release will be made available approximately once every three (3) months providing fixes and improvements to the release. No large functional changes will be made between these updates allowing customers to upgrade without losing any functionality or having to re-create any Security World or migrate keys.
Note: Not all parts of the Security World Release will be updated with every update release, for example, the HSM firmware will have a less frequent update schedule.
Regular Open-Source Software Updates
The regular updates to the LTS release will include updates to the Open-Source Software (OSS) used within Security World ensuring any appropriate security updates are incorporated into the release. Active monitoring of all OSS used in the LTS releases will be performed and any patches/updates will be made.
Hotfixes and updates including hotfixes
Hotfixes will be available on LTS releases allowing for more frequent updates to be provided on issues identified by customers.
The LTS regular updates will include any hotfixes made during this time ensuring customers don’t need to re-patch their release with the hotfix.
Full Option Pack Support
nShield Security World LTS releases will have support for all in-support nShield Option Packs and any updates required for option packs will be released providing support for any active nShield LTS releases.
nShield Option Packs will primarily target their support around LTS releases.
Aligned with Certifications
nShield LTS releases will, where possible, be aligned with certifications on the HSM firmware ensuring a consistent version for both certified firmware with all other parts of the software.
Support for all supported certification HSM firmware
LTS releases will also support all supported certified firmware from previous releases allowing the Connect image and Client-side software from LTS releases to be used with any supported active certified firmware ensuring the latest updates and fixes are still received.
Please also see LTS-C firmware only releases.
Long Term Support and Updates
The support and regular updates mentioned above are provided for up to three (3) years from the start of the LTS support phase. This makes the LTS releases the best choice for stability and long term support with updates.
When creating the LTS release, planning will be done to ensure that compatibility with the future (i.e. operating system support) is built into the release support.
Extended Support
Following the end of the update cycle, the regular update cycle will end but extended support will still be available for a maximum period of one (1) year, offering hotfix support and security updates.
Support overlap with future LTS releases
Entrust will ensure a period of overlap between the current and next LTS release giving customers time to evaluate and upgrade to the later LTS release whilst still getting update support on the current release.
Note: This overlap does not include extended support time, the overlap is over the main support period.
LTS Release Cadence
A new LTS release of Security World will be published approximately every eighteen (18) months, allowing customers to plan their roadmaps. This also provides the one (1) year overlap with the previous LTS release. The LTS support phase will be extended on the current LTS release if the new LTS release is delayed to ensure the overlap period remains at one (1) year. It is usual that there would only be a maximum of two (2) active LTS releases at any one time (to allow for the overlap between LTS releases).
We encourage all customers to adopt a LTS release where possible and is recommended to upgrade to the latest version of that LTS release. Later STS or LTS releases always contain the functionality made available in previous releases (unless specifically stated otherwise).
LTS Update Cadence
LTS releases themselves will have the following update cadence:
-
Client-side updates will be released approximately every three (3) months.
-
Firmware and Connect updates will be released at least once per year.
-
Certified firmware updates will be released according to certification roadmap.
Updates are cumulative and release as patches, each update is built to include all of the preceding updates. Customers are recommended to install the latest update available. Updates may include Latest OSS, hotfixes and critical fixes.
LTS Release Phases
nShield LTS release lifecycle is detailed below.
Long-Term (LTS) Support
This is the main phase of the LTS release where the release is in full support and regular updates are made as defined in nShield LTS Features.
Extended Support
During this phase the regular updates of the LTS release stop. It is expected that most customers will have already moved onto the next LTS release. However extended support is provided which allows for hotfix support and fixes for Critical CVEs on OSS.
End of Life (EOL)
End of life refers to the date when the release reaches the end of lifecycle and stops receiving fixes and updates. End of life may also be referred to as 'end of support' (EOS).
As the end-of-life approaches for a Security World release, we recommend that customers move to a newer Security World version. LTS releases will always overlap support phases with a newer LTS release to ensure continued support is available during the transition. After support ends, we recommend that customers adopt a supported version of Security World.