[5.6] DSM Patch 1 - April 15, 2026

Fortanix Data Security Manager (DSM) 5.6.2928.3457 release provides an overview of resolved issues. 

This release is superseded by the April 20, 2026, release.

WARNING

• If you want to upgrade Fortanix DSM to version 5.6.2928.3457, your current DSM version must be at least 5.2 Patch 2*.

• Downgrade from 5.6.2928.3457 to any prior version is not supported due to Kernel upgrades.

• Upgrading Fortanix DSM to version 5.6.2928.3457 includes an underlying Kubernetes upgrade to version 1.34. As a result, the upgrade process may take longer than usual.

*The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.6.2928.3457.

NOTE

The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix support if you are planning an upgrade.

• The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.

• If your Fortanix DSM version is 5.4 or later, then the HSM Gateway version must also be 5.4 or later. Similarly, if the HSM Gateway version is 5.4 or later, then your Fortanix DSM version must be 5.4 or later.

1. Bug Fixes

• Fixed DSM enclave Out of Memory (OOM) panics caused by memory allocation failures under high load specific to Azure Log Analytics integration (JIRA: PROD-11251).

2. Security Fixes

• Fixed a security issue to improve session management and overall account protection (JIRA: PROD-11225).

• Fixed an issue in the Lua plugin environment to improve isolation and prevent unintended behavior from plugin code (JIRA: PROD-11222).

3. Known Issues

• On VMware nodes, /etc/resolv.conf may be cleared after a reboot, resulting in missing nameserver entries. Although the /etc/network/interfaces configuration is correct, any manual updates to /etc/resolv.conf are overwritten after a reboot or when the CoreDNS pod restarts (JIRA: RODE-373).

  Workaround:

  Perform the following steps:

  1. Run sudo apt purge netplan.io.

  2. If the file is removed or CoreDNS continues to have issues, manually update the nameserver entries in /etc/resolv.conf.

  3. Restart networking: sudo systemctl restart networking.

  4. Delete the CoreDNS pods to allow them to restart.

For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the DSM 5.6 release notes.