PKI Spotlight v27.5.0 Release Announcement

We’re excited to announce the availability of PKI Spotlight 27.5.0, our latest cumulative quarterly release delivering powerful new features, critical visibility enhancements, and application security hardening to support the evolving needs of enterprise PKI and cryptographic environments.

This release represents our continued investment in real-time PKI observability, expanding support for complex deployment scenarios across ADCS, multi-vendor HSMs, and mission-critical certificate infrastructure.

What’s New in Q3 2025

Multi-Vendor HSM Enhancements

We have added monitoring for Luna High Availability configurations and additional firmware versions.

• Expanded monitoring of Luna HA Groups, including slot availability, group membership, and health indicators.
• Support for both Luna Firmware v7 and v10, ensuring broader compatibility across mixed HSM environments.
• New health alert for HA Slot synchronization issues within Luna HA Groups, promoting a stronger HSM redundancy posture.

CRL & CA Certificate Visibility

We overhauled the Certs/CRL screen, separating it into separate capabilities. New datapoints introduced into the UIs have increased utility for management.

• Active CA Certificates are now clearly marked in the UI, simplifying identification of which CA cert is currently in use.
• Spotlight now identifies and surfaces CRLs associated with non-primary (but non-expired) CA certificates, ensuring full revocation coverage even when CAs rotate or are demoted. This prevents hidden failure scenarios and supports stricter revocation hygiene.
• To help teams stay ahead of certificate revocation issues, a new daily email digest highlights CRLs nearing expiration, prompting timely renewal and reducing revocation-related downtime.

Location Validation Interface

A new built-in UI allows administrators to validate the reachability of CDP, AIA, and OCSP endpoints, ensuring critical PKI availability paths are functioning as expected, before service disruptions occur.

Expanded NDES Certificate Testing

Tooltips added to the NDES Is-Alive tests now clarify how PKI Spotlight determines the correct Signing and Encryption certificates, helping reduce configuration uncertainty and validation errors.

Application Security Hardening

We’ve significantly expanded our internal security posture to align with OWASP-compliant development practices and ensure our platform continues to meet the highest standards of security. by enhancing:

• Static Application Security Testing (SAST)
• API Scanning & Testing
• Vulnerability Header Scanning
• Software Composition Analysis for dependency and library risk

Other Improvements

• Persistent banner setting allows admins to display the controller name for context awareness across the application.
• New detection for Debug Mode enabled on Certificate Authorities, helping teams avoid unintentional exposure of sensitive information or insecure configurations.
• Group validation now provides immediate feedback to streamline SSO configuration.
• Updated group mapping interface with support for GUID and display name entry.

Fixes & Stability Updates

• Corrected UI and messaging issues across agent and event management workflows.
• Fixed data collection errors for Luna HSMs with non-HA partitions or unsupported configurations.
• Addressed detection issues for invalid certificates affecting NDES Is-Alive status.
• Resolved a rare UI loading error caused by OWASP-compliant web.config implementations.
• Improved Luna HA configuration tab state persistence.
• Addressed SSO group validation handling for large orgs.

Ready to Upgrade?

Current customers can update directly within their environment or contact PKI Solutions Support for assistance.

Not yet using PKI Spotlight? Request a demo to see how it transforms PKI monitoring into proactive risk management.

Let us help you see the unseen.