Migration from 1.6.x to 1.7.0

This guide contains instructions for migration from PowerAuth Server version 1.6.x to version 1.7.0.

Database Changes

For convenience you can use liquibase for your database migration.

For manual changes use SQL scripts:

• PostgreSQL script
• Oracle script
• MSSQL script

Updated DB Schema for FIDO2 Support

Following columns have been added to table pa_activation for FIDO2 support:

• external_id - external identifier of the activation
• protocol - protocol enumeration: powerauth or fido2

The size of column extras in table pa_activation was increased to 4000 from 255 to support larger data.

New Database Table for Application Configuration

A new database table pa_application_config has been added:

• id - application configuration row identifier
• application_id - application identifier
• config_key - configuration key
• config_values - list of configuration values serialized as JSON array

Following parameters can be configured:

• fido2_attestation_fmt_allowed - list of allowed attestation formats for FIDO2 registrations, unset value means all attestation formats are allowed
• fido2_aaguids_allowed - list of allowed AAGUIDs for FIDO2 registration, unset value means all AAGUIDs are allowed
• fido2_root_ca_certs - list of trusted root CA certificates for certificate validation in PEM format

New Database Table for FIDO2 Authenticator Models

A new database table pa_fido2_authenticator has been added:

• aaguid - identifier of the FIDO2 authenticator model
• description - human-readable description of the FIDO2 authenticator model
• signature_type - signature type provided by the FIDO2 authenticator model