[3.36] - December 12, 2023

This article provides an overview of new features and improvements in the Fortanix Confidential Computing Manager (CCM) 3.36 release.

1. Prerequisites

• A container registry account to push the converted application container Image(s).

2. New Features

• CCM Saas:

  • Updated the Fortanix Confidential Computing Manager documentation to reflect the switch from standard to enterprise subscriptions across all accounts.

  • Added Disable Default Certificate parameter in ACI Custom Deployment.
    For more information, refer to the User's Guide - Deploying the ACI Application Using Azure Portal document.

  • Added steps for enrolling a compute node through CentOS7 node agent.
    For more information, refer to the User's Guide: Enroll a Compute Node (bare metal or VM) - SGX document.

  • Added support for deploying AWS Nitro Enclaves Compute Nodes through AWS Marketplace.
    For more information, refer to the User's Guide: Provision Nitro Compute Node Using AWS Marketplace document.

3. Improvements

• Enclave OS:

  • Added validation checks for converter:

    • The chain path and CA certificates are not supported in AWS Nitro Enclave.

    • The key size of application certificates must be either 2048, 3072, or 4096.

  • Client application's console logs are now available without running Nitro enclaves in debug mode.

  • Added support for default certificates in Nitro converted applications. This feature can be disabled by configuring the ENCLAVEOS_DISABLE_DEFAULT_CERTIFICATE environment variable.

  • Supports default certificates with empty Subject Common Names if no certificates were explicitly configured.

  • Provides a copy of the user-configured certificates in the default certificate location.

4. Limitations

Fortanix has a fair usage policy in this Early Customer Access Program. Hence, Fortanix has limited the resources one can create per account. Therefore, it is expected to observe a resource creation failure message once you have reached the maximum limit.

To report an issue or bug, visit https://support.fortanix.com/hc/en-us/requests/new.

5. Node Agent Download

Download link for SGX Platform: Fortanix Node Agent Software - Intel SGX Platform 

Download link for AWS Nitro Platform: Fortanix Node Agent Software - AWS Nitro Platform