This document provides an overview of improvements, bug fixes, and known issues in the Fortanix Confidential Computing Manager (CCM) 3.24 release.
Prerequisites
A container registry account to push the converted application container Image(s).
A subscription account on Azure Portal to create Compute Node/s.
Improvements
CCM SaaS:
Improved the handling of all detail pages to show the appropriate errors messages when viewing a non-existing item on the application, dataset, and so on.
Added a help tooltip for the CPU Count field in AWS Nitro Enclaves parameters.
Improved the validation of AWS Nitro Enclaves measurements JSON inputs.
Enclave OS:
Added the support for loopback (localhost) network device inside the AWS Nitro Enclave.
Implemented the user switch while running client image in AWS Nitro Enclave. Elastic Search application is also supported now.
Added the support for
TCP_DEFER_ACCEPT,TCP_QUICKACK,TCP_USER_TIMEOUT,TCP_FASTOPEN,TCP_MAXSEG,TCP_KEEPIDLEinsetsockoptandgetsockoptsystem calls.
Bug Fixes
CCM SaaS:
Reduced the requirement of ports in the application configurations in the Workflows to 0. Previously, 1 port was mandatorily required.
Enclave OS:
The Nitro Conversion application certificates are placed in the expected location in the client program's filesystem.
Known Issues
CCM SaaS Issues:
CentOS 7 node has
GroupOutOfDateBIOS on Azure. BIOS updates might be required for such nodes for EPID attestation to work.
Limitations
Fortanix has a fair usage policy in this Early Customer Access Program. Hence, Fortanix has limited the resources one can create per account. Therefore, it is expected to observe a resource creation failure message once you have reached the max limit.
To report an issue/bug, visit https://support.fortanix.com/hc/en-us/requests/new.
Node Agent Download
Download link for SGX Platform: https://support.fortanix.com/hc/en-us/articles/360043407012-Fortanix-Node-Agent-Software-Intel-SGX-Platform
Download link for AWS Nitro Platform: https://support.fortanix.com/hc/en-us/articles/4412575587732-Fortanix-Node-Agent-Software-AWS-Nitro-Platform
NOTE
The current version of the node agent on Azure Marketplace will not create certificates.