1. Overview
This article provides an overview of new features in the Fortanix Filesystem Encryption (FSE) for Linux 2.1.179 release.
2. New Features
Added support for Data Transformation, enabling in-place encryption of existing data within a directory without requiring users to copy or move data through a mounted filesystem, thereby reducing the additional storage required during data migration (JIRA: FSE-663).
For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Data Transformation.
Added support to create exportable Key Encryption Keys (KEK) to enable key recovery in Disaster Recovery scenarios (JIRA: FSE-777).
For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Configuration.
NOTE
You must have Fortanix Data Security Manager (DSM) version >=4.29 and FSE Agent version >=1.0.29 to access the FILE DECRYPTION POLICY tab in DSM user interface (UI).
For existing FSE-Linux users (with FSE Agent <1.0.29)
Install the latest Filesystem Encryption for Linux and update the FSE policy using the policy update command to automatically change the custom metadata and enable the FILE DECRYPTION POLICY tab in the Fortanix DSM UI. For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies.
Uninstalling the previous Debian package is not necessary.
For information on installing or upgrading to the latest FSE-Linux version, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Installation.
3. Installation
To install the latest Filesystem Encryption package for Linux, click here.