1. Overview
This article provides an overview of new features in the Fortanix Filesystem Encryption (FSE) for Windows 1.0.58 release.
2. New Features
A host administrator can encrypt folders and/or files on their FE-Host running on Windows Server 2016, 2019, or 2022 (JIRA: PM-154).
A host administrator can map a new or existing FE-Host Agent to a Fortanix Data Security Manager (DSM) group, based on the approval by a key administrator using the DSM Quorum Approval policy (JIRA: PM-157).
A host administrator can create new FE-Rules in the Fortanix DSM group (JIRA: PM-158).
The FE-Agent allows users to access encrypted and decrypted assets as per their permissions on the FE-Host for up to 24 hours if the FE-Host suddenly loses connection to Fortanix DSM (JIRA: PM-159).
The FE-Host Agent events performed using DSM UI or API are now audit logged in Fortanix DSM and exportable to an SIEM (Security Incident and Event Management) (JIRA: PM-162).
The FE-Host Agent events are now audit logged on the agent host with PCI (Payment Card Industry) compliance and exportable to an SIEM (Security Incident and Event Management) (JIRA: PM-163).
The File Encryption (FE)-Agent registered on a specified FE-Host correctly encrypts the assets on the specified file system, using the FE-Rule(s) defined for the FE-Host (JIRA: PM-164).
3. Known Issues
Windows shared folders and/or drives not part of the Fortanix FSE solution are automatically re-shared, and their sharing permissions are overridden during a system reboot (JIRA: FSE-89).
When the Automount feature is configured and enabled, it only triggers during system reboot. If the user signs out and then logs back in, the Automount feature is not activated as expected (JIRA: FSE-94).
When a drive is mounted using the FSE agent, the users can take ownership of the volume, but they cannot take ownership of individual folders within the mount, even if they have the appropriate permissions (JIRA: FSE-93).
The users attempting to remove "Write Permission" without having the necessary permissions may intermittently encounter a dialog stating, "File is open" instead of receiving an "Operation denied" message (JIRA: FSE-101).
When changing permissions, users may intermittently see a dialog with the error message "Failed to enumerate objects in the container. Access is denied." Despite this message, the requested operation is applied successfully. Clicking the "Cancel" or "Continue" button resolves the issue (JIRA: FSE-102).
When users change the log location as described in the guide, it will only take effect after an agent restart (JIRA: FSE-103).
For more information, refer to the Filesystem Encryption for Windows documentation.
4. Installation
To install the latest Filesystem Encryption package for Windows, click here.