See below the known issues common to all PKI Hub 1.4.0 installations for Cryptographic Security Platform 1.3.0.

Session expiration does not redirect to the login page (ATEAM-17362)

When a user session expires, the Management Console does not automatically redirect to the login page.

nCipher wrapping key not detected (ATEAM-19125)

When deploying a solution that uses an nShield HSM, the deployer:

• Does not check whether a wrapping key exists.
• Does not create the key if it does not exist.

Occasional restore failures of single-node installations (EDM-16171)

The process described in Restoring PKI Hub fails 75% of the time on single-node installations.

Workaround: Run the clusterctl uninstall command to uninstall the cluster, and re-try Restoring PKI Hub.

RTC configured in local time instead of UTC (EDM-19299)

In ISO-based installations of the PKI Hub, the system RTC (Real-Time Clock) is configured in local time instead of UTC (Coordinated Universal Time). 

Upgrade from previous versions not supported (EDM-19933)

PKI Hub 1.4.0 only supports greenfield installations, that is, it does not support upgrading from a previous version like PKI Hub 1.3.0.

CVE-2026-31431 Vulnerability (EDM-21489)

The Linux kernel used in PKI Hub is affected by the CVE-2026-31431 vulnerability.