1. Overview
This article provides an overview of new features, enhancements and known issues in the Fortanix Filesystem Encryption (FSE) for Linux 2.2.192 release.
2. New Features
Added support for certificate-based (mTLS) authentication with Fortanix Data Security Manager (DSM), in addition to API key authentication (JIRA: PM-154).
For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Client Configuration.
Added support for centralized FSE policy management, allowing multiple FSE encrypted directories across hosts to use shared and centrally managed policies through Fortanix DSM (JIRA: FSE-718).
For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Client Configuration.
3. Enhancements
Added support for verifying Data Transformation. After Data Transformation is completed, you can run the
verifycommand to confirm that FSE has successfully encrypted all files in the target directory (JIRA: FSE-780).For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Data Transformation.
Added support for symbolic link (
symlink) filename encryption (JIRA: FSE-845).
4. Known Issues
When you unmount and delete a drive that shares a policy ID with another drive, the hostname and cipher directory path of the deleted drive remain in the Associated Host list (JIRA: FSE-852).
When you copy the contents of a deleted drive to a new folder and then use Track and Mount on that folder, the Associated Host list does not add the tracked mount directory (JIRA: FSE-853).
NOTE
You must have Fortanix Data Security Manager (DSM) version >=4.29 and FSE Agent version >=1.0.29 to access the FILE DECRYPTION POLICY tab in DSM user interface (UI).
For existing FSE-Linux users (with FSE Agent <1.0.29)
Install the latest Filesystem Encryption for Linux and update the FSE policy using the policy update command to automatically change the custom metadata and enable the FILE DECRYPTION POLICY tab in the Fortanix DSM UI. For more information, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Policies.
Uninstalling the previous Debian package is not necessary.
For information on installing or upgrading to the latest FSE-Linux version, refer to Filesystem Encryption for Linux Using Fortanix Data Security Manager - Installation.
5. Installation
To install the latest Filesystem Encryption package for Linux, click here.