[1.1.32] FSE-Linux - December 11, 2024

1. Overview

This article provides an overview of new features in the Fortanix Filesystem Encryption (FSE) for Linux 1.1.32 release.

2. New Features

• The Filesystem Encryption Agent now supports Key Encryption Key (KEK) rotation with seamless Data Encryption Keys (DEKs) re-encryption, ensuring zero downtime for encrypted file system operations (JIRA: FSE-107).
  For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Client Configuration.

NOTE

• You must have Fortanix Data Security Manager (DSM) version >=4.29 and FSE Agent version >=1.0.29 to access the FILE DECRYPTION POLICY tab in DSM user interface (UI).

• For existing FSE-Linux users (with FSE Agent <1.0.29) -

  • Install the latest Filesystem Encryption for Linux and update the FSE policy using the policy update command to automatically change the custom metadata and enable the FILE DECRYPTION POLICY tab in the Fortanix DSM UI. For more details, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies.

  • Uninstalling the previous Debian package is not necessary.

For details on installing or upgrading to latest FSE-Linux version, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Installation.

For details on FSE Policy and the FILE DECRYPTION POLICY UI tab, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies.

3. Installation