Fortanix Data Security Manager (DSM) 5.9.2986.3636 provides an overview of bug fixes and security fixes.
WARNING
If you want to upgrade Fortanix DSM to version 5.9.2986.3636, your current DSM version must be at 5.8* or 5.7*.
Downgrade from 5.9.2986.3636 to any prior version is not supported due to Kernel upgrades.
*The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.9.2986.3636.
NOTE
The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix Support if you are planning an upgrade.
The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.
If your Fortanix DSM version is 5.8 or later, then the HSM Gateway version must also be 5.8 or later. Similarly, if the HSM Gateway version is 5.8 or later, then your Fortanix DSM version must be 5.8 or later.
1. Security Fixes
Updated the CA certificates package and the certificates bundled in the SGX binary to address the eMudhra intermediate CA certificate compromise (JIRA: SI-129).
For more information, refer to the eMudhra Intermediate CA Compromise advisory.
Applied the latest security updates in Fortanix DSM (JIRA: RODE-621).
2. Bug Fixes
Fixed an issue where the updater pod could remain in the 1/2 state, causing upgrades from Fortanix DSM 5.6 Patch 2 to 5.8 to stall (JIRA: ES-656).
For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the DSM 5.9 release notes.
3. Installation
To install the DSM Runtime Encryption® SGX (on-prem/Azure) and Software (AWS/Azure) packages, Download Here.