--- title: "CNG/EKM Changelog" slug: "cng-ekm-changelog" updated: 2026-08-19T07:41:11Z published: 2026-08-19T07:41:11Z canonical: "support.fortanix.com/cng-ekm-changelog" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.fortanix.com/llms.txt > Use this file to discover all available pages before exploring further. # CNG/EKM Changelog ## New Features, Improvements, and Bug Fixes ### [[5.8.2962] - July 09, 2026 (Latest)](/v1/docs/cng-ekm-5-7-2954) - Added support for the ML-DSA algorithm in Fortanix CNG library **(JIRA: EXTREQ-1625)**. ### [[5.7.2954] - May 25, 2026 (Latest)](/v1/docs/cng-ekm-5-7-2954) No Changes ### [[5.6.2919] - February 26, 2026](/v1/docs/cng-ekm-5-6-2919) - Added support for creating RSA_3072, RSA_4096, and RSA_8192 keys in the EKM provider (**JIRA: EXTREQ-1191**). ### [[5.5.2906] - January 23, 2026](/v1/docs/cng-ekm-5-5-2906) - Added server certificate revocation checks to the Fortanix CNG Provider when connecting to Fortanix DSM (**JIRA: EXTREQ-1378**). - Added server certificate revocation checks to the Fortanix EKM Provider when connecting to Fortanix DSM (**JIRA: EXTREQ-1379**). ### [[5.4.2891] - October 31, 2025](/v1/docs/cng-ekm-5-4-2891) No Changes ### [[5.3.2861] - September 25, 2025](/v1/docs/cng-ekm-5-3-2861) No Changes ### [[5.2.2852] - August 11, 2025](/v1/docs/cng-ekm-5-2-2852) No Changes ### [[5.1.2830] - July 15, 2025](/v1/docs/cng-ekm-5-1-2830) No Changes ### [[5.0.2817] - May 27, 2025](/v1/docs/cng-ekm-5-0-2817) No Changes ### [Release 4.37.2554](/v1/docs/cng-ekm-4-37-2554) No Changes ### [Release 4.36.2530](/v1/docs/cng-ekm-4-36-2530) - Added support for enabling default export permission during key creation using the Windows CNG client to allow copying keys for disaster recovery scenarios **(JIRA: PM-385).** - Updated custom logging for the Windows CNG, EKM, and CSP clients, providing more detailed and client-specific log information **(JIRA: PROD-9776).** ### [Release 4.35.2513](/v1/docs/cng-ekm-4-35-2513) No Changes ### [Release 4.34.2503](/v1/docs/cng-ekm-4-34-2503) No Changes ### [Release 4.33.2492](/v1/docs/cng-ekm-4-33-2492) No Changes ### [Release 4.32.2476](/v1/docs/cng-ekm-4-32-2476) No Changes ### [Release 4.31.2462](/v1/docs/cng-ekm-4-31-2462) - Enhanced the Fotanix DSM EKM client to always use basic authentication tokens (API keys) for all the cryptographic operations to optimize the session management process **(JIRA: PROD-8660)**. ### [Release 4.30.2447](/v1/docs/cng-ekm-4-30-2447) - Added support for the Quorum approval policy in the Windows CNG client **(JIRA: PM-68)**. - The Fortanix DSM 32-bit version of the CNG Provider client now supports sign and verify operations **(JIRA: PM-332)**. ### [Release 4.29.2426](/v1/docs/cng-ekm-4-29-2426) No Changes ### [Release 4.28.2410](/v1/docs/cng-ekm-4-28-2410) No Changes ### [Release 4.27.2394](/v1/docs/cng-ekm-4-27-2394) No Changes ### Release 4.26.2384 No Changes ### [Release 4.25.2353](/v1/docs/cng-ekm-4-25-2353) No Changes ### [Release 4.24.2343](/v1/docs/cng-ekm-4-24-2343) No Changes ### [Release 4.23.2328](/v1/docs/cng-ekm-4-23-2328) No Changes ### Release 4.22.2307 No Changes ### Release 4.21.2288 - Added implementation of the `IsAlgSupported` function in the Windows CNG client (**JIRA: PROD-7275**). ### [Release 4.20.2276](/v1/docs/cng-ekm-4-20-2276) No Changes ### [Release 4.19.2244](/v1/docs/cng-ekm-4-19-2244) - Published the Microsoft CNG/EKM Provider client (Windows 32-bit Installer) **(JIRA: PROD-6714)**. - Added support for verifying signatures in the Windows CNG client **(JIRA: PROD-6921).** - Added support for the `NCRYPT_OVERWRITE_KEY_FLAG` in the Windows CNG client (**JIRA: EXTREQ-1240**). ### [Release 4.18.2231](/v1/docs/cng-ekm-4-18-2231) No Changes ### [Release 4.17.2214](/v1/docs/cng-ekm-4-17-2228) - Updated the CNG client to support CitriX FAS integration **(JIRA: PROD-6719)**. ### [Release 4.16.2195](/v1/docs/cng-ekm-4-16-2452) - Published the Microsoft CNG/EKM Provider client (Windows 64-bit Installer**) (JIRA: DEVOPS-3408).** - Published the Microsoft CNG Fortanix DSM client to the public repository **(JIRA: DEVOPS-3326).** ### Release 4.15 - Added support for the "no MGF hash algorithm" option in PKCS#1 v1.5 padding in the Windows CNG client. ### [Release 4.14.2161](/v1/docs/cng-ekm-4-14-2161) No Changes ### Release 4.13.2147 - Implemented the signtool workaround using `FORTANIX_SIGNTOOL_BUG_WORKAROUND` in the Windows CNG client (**JIRA: PROD-5863**). ### Release 4.12 - The following are the enhancements: - The retry timeout value in the EKM provider is now configurable **(JIRA: PROD-5532)**. - Added automatic retry **(JIRA: PROD-5519)**. - Two authentication API calls are not performed upfront **(JIRA: PROD-5519)**.