[1.2.49] FSE-Linux - February 20, 2025

1. Overview

This article provides an overview of improvements and bug fixes in the Fortanix Filesystem Encryption (FSE) for Linux 1.2.49 release.

2. Improvements

• Added support for easily looking up FSE objects (Master Key, KEK, and Policy) associated with specific hosts and mount points. (JIRA: FSE-349).
  This enhancement helps Linux agents by adding custom attributes (hostname and cipherdir) to objects upon creation, thereby improving operational efficiency.

NOTE

• You must have Fortanix Data Security Manager (DSM) version >=4.29 and FSE Agent version >=1.0.29 to access the FILE DECRYPTION POLICY tab in DSM user interface (UI).

• For existing FSE-Linux users (with FSE Agent <1.0.29) -

  • Install the latest Filesystem Encryption for Linux and update the FSE policy using the policy update command to automatically change the custom metadata and enable the FILE DECRYPTION POLICY tab in the Fortanix DSM UI. For more details, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies

  • Uninstalling the previous Debian package is not necessary.

For details on installing or upgrading to latest FSE-Linux version, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Installation.

For details on FSE Policy and the FILE DECRYPTION POLICY UI tab, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies.

3. Bug Fixes

• Fixed an issue on Linux machines enrolled in an Active Directory (AD) domain where the agent failed to look up users and groups, causing policy checks to fail when users were authenticated using AD (JIRA: FSE-350).

4. Installation