---
title: PingFederate 11.1.3 (December 2022)
description: Fixed PF-32395
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1113
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1113.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 1, 2024
section_ids:
  resolved-issues: Resolved issues
  improvements-to-custom-revocation-checker: Improvements to custom revocation checker
  cluster-replication-notifications: Cluster replication notifications
  null-pointer-exception-during-dependency-error-detection: Null pointer exception during dependency error detection
  pingfederate-updates-to-hsm-ordering: PingFederate updates to HSM ordering
---

# PingFederate 11.1.3 (December 2022)

## Resolved issues

### Improvements to custom revocation checker

Fixed PF-32395

We've improved PingFederate's custom revocation checker, ensuring that when the server returns stapled Online Certificate Status Protocol (OCSP) responses, PingFederate invokes the checker. Previously, PingFederate used the default revocation checker to validate these responses, which could cause single sign-on (SSO) failures with BCFIPS mode enabled. For more information, see [Configuring certificate revocation](../administrators_reference_guide/help_certificaterevocationcheckingtasklet_managecertificaterevocationstate.html).

### Cluster replication notifications

Fixed PF-32398

We've improved notifications to signal to administrators that in the event of a replication failure or any changes to cluster configuration require replication. For more information, see [Cluster management](../administrators_reference_guide/pf_cluster_management.html).

### Null pointer exception during dependency error detection

Fixed PF-32553

During PingFederate dependency error detection, OGNL expressions in adapter-to-adapter mappings no longer raise a null pointer exception (NPE).

### PingFederate updates to HSM ordering

Fixed PF-32556

We've updated the recommended security provider ordering for the Thales Luna Network hardware security module (HSM) to address an issue where temporary keys and sessions could accumulate on the HSM, eventually resulting in resource exhaustion. A limitation of the new ordering is that EC certificates can no longer operate as SSL server certificates. For details on the new order, see [Integrating with Thales Luna Network HSM](../getting_started_with_pingfederate/pf_integrating_thales_luna_network_hsm.html).