[28.0] Key Insight - October 07, 2026

This article provides an overview of the new features, enhancements, and resolved issues in the Fortanix Key Insight 28.0 release.

1.0 New Features

Manual Import Connections: Fortanix Key Insight now supports Manual Import connections, allowing you to upload cryptographic inventory using a standardized CSV template or CBOM (CycloneDX) format. Manual Import is decoupled from automated discovery, allowing you to onboard cryptographic metadata without requiring a connection.
This capability is useful for air-gapped, restricted, or audit environments, allowing you to use Key Insight's analytics, dashboards, and risk evaluation capabilities with imported cryptographic inventory (JIRA: KI-2608).
Users can now:
- Onboard a Manual Import connection and upload cryptographic inventory using a standardized CSV or CBOM format.
- Use the Overview page to view all scanned assets with a high-level summary.
- Use the Assessment page to review violations, risks, and security concerns across scanned manually imported assets.
- Use the Keys page to view the list of all scanned keys and their metadata.
- Use the Resources page to view the list of all scanned resources and their metadata.
- Use the Certificates page to view the list of all scanned certificates and their metadata.
- Manage Manual Import connections from the Connections page.
For more information, refer to the following guides:
Oracle Cloud Infrastructure (OCI) Cloud Connections: Fortanix Key Insight Cloud Connections now supports Oracle Cloud Infrastructure, enabling streamlined onboarding, metadata retrieval, and unified compliance reporting alongside existing AWS, Azure, and GCP connections (JIRA: KI-5045).
Users can now:
- Onboard an OCI connection as part of cloud connections onboarding.
- Use the Overview page to view the connected OCI environment and all scanned assets with a high-level summary.
- Use the Assessment page to review violations, risks, and security concerns across scanned OCI assets.
- Use the Keys page to view the list of all scanned keys and their metadata.
- Use the Services page to view the list of all scanned services and their metadata.
- Manage OCI connections from the Connections page.
- Use the PQC Central dashboard to assess the Post-Quantum Cryptography (PQC) readiness of OCI connections using a sunburst chart and drill-down capabilities.
For more information, refer to the following guides:
Added the NCA compliance framework to the Policy Center to help organizations enforce, monitor, and report on cybersecurity requirements defined by the National Cybersecurity Authority (JIRA: KI-5496).
For more information, refer to Cryptographic Policy Management.

2.0 Enhancement

Added support for scanning custom Source Code domains through internal proxies or endpoints that use custom or self-signed certificates. Users can add custom CA certificates to the operating system’s trusted certificate store to establish trusted connections (JIRA: KI-5010).
For more information, refer to the following guide:

3.0 Bug Fixes

Fixed an issue where RSA private keys in PEM (PKCS#1) format were not detected during cryptographic asset discovery (JIRA: KI-5562).

4.0 Known Issues

For OCI connections, the Services encrypted with Platform-managed keys violation is displayed correctly under Medium Risk on the Assessment page, while its risk level is displayed as Low in the Violations tab of the corresponding service.

5.0 Installation

For the corresponding version of the Fortanix Armor Kubernetes Operator Helm Chart, click here.
To install the latest Fortanix On-premises Scanner package, click here.
To install the latest File System and Network Scanner Agent for Linux package, click here.
To install the latest File System Scanner Agent for Windows package, click here.