[1.0.26] FSE-Linux - April 06, 2024

1. Overview

This article provides an overview of new features in the Fortanix Filesystem Encryption (FSE) for Linux 1.0.26 release.

2. New features

• A host administrator can create, edit, or delete a new File Encryption Access-Control List (FE-ACL) (JIRA: PM-303).

• The File Encryption (FE)-Agent registered on a specified FE-Host correctly encrypts the assets on the specified file system, using the FE-Rule(s) defined for the FE-Host (JIRA: PM-164).

• The FE-Host Agent events are now audit logged on the agent host with PCI (Payment Card Industry) compliance and exportable to an SIEM (Security Incident and Event Management) (JIRA: PM-163).

• The FE-Host Agent events performed using DSM UI or API are now audit logged in Fortanix DSM and exportable to an SIEM (Security Incident and Event Management) (JIRA: PM-162).

• The FE-Agent enforces the creation of Access Policies in Fortanix DSM for files and folders for registered FE-Agents or FE-Hosts (JIRA: PM-160).

• The FE-Agent enforces updated Access Policies on Fortanix DSM and allows only permitted operations on the FE-Host (JIRA: PM-161).

• The FE-Agent allows users to access encrypted and decrypted assets as per their permissions on the FE-Host for up to 24 hours if the FE-Host loses connection to Fortanix DSM (JIRA: PM-159).

• A host administrator can create new FE-Rules in the Fortanix DSM group (JIRA: PM-158).

• A host administrator can map a new or existing FE-Host Agent to a Fortanix Data Security Manager (DSM) group, based on the approval by a key administrator using the DSM Quorum Approval policy (JIRA: PM-157).

• A host administrator can encrypt folders and/or files on their FE-Host running on the following Linux Operating Systems (JIRA: PM-153):

  • Red Hat Enterprise Linux (RHEL) 8, 9

  • SUSE Linux Enterprise Server 15

  • Ubuntu 20.04, 22.04

For more information, refer to the Filesystem Encryption for Linux documentation.

3. Installation