---
title: "Setup and Usage"
slug: "filesystem-encryption-linux-using-fortanix-dsm-setup-and-usage"
updated: 2026-07-27T11:07:23Z
published: 2026-07-27T11:07:42Z
canonical: "support.fortanix.com/filesystem-encryption-linux-using-fortanix-dsm-setup-and-usage"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Setup and Usage

Fortanix-Data-Security-Manager (DSM) provides a secure and efficient Filesystem Encryption (FSE) solution for Linux, built on the Gocryptfs and FUSE frameworks. It enables users to encrypt filesystems while maintaining seamless application functionality. DSM handles the generation, storage, and management of cryptographic keys and fine-grained policies, ensuring that access to encrypted files is tightly controlled. With features like Quorum policies for enhanced security and audit logging for accountability, DSM offers a centralized and robust approach to data protection.

The encryption process involves DSM securely managing the **Master Key** and **Key Encryption Key (KEK)**. During initialization, the Master Key is encrypted with the KEK and stored securely. Upon mounting the filesystem, the FSE agent retrieves the Master Key, derives a **Content Encryption Key** for file data and an optional **File Name Encryption Key** for filenames, and enforces policies without retaining the Master Key in memory. This streamlined process ensures that sensitive data remains protected, while access policies written in Rego for Open Policy Agent (OPA) grant granular control to authorized users.

*For more information on how to install and configure Filesystem Encryption on Linux machine, refer to the following articles:*

- [*Filesystem Encryption Linux Using Fortanix Data Security Manager - Installation*](https://fortanix.zendesk.com/hc/en-us/articles/39999227355284-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Installation)
- [*Filesystem Encryption Linux Using Fortanix Data Security Manager - Configuration*](https://fortanix.zendesk.com/hc/en-us/articles/39999217222932-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Configuration)
- [*Filesystem Encryption Linux Using Fortanix Data Security Manager - Policies*](https://fortanix.zendesk.com/hc/en-us/articles/39999882505236-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Policies)
- [*Filesystem Encryption Linux Using Fortanix Data Security Manager - Client Configuration*](https://fortanix.zendesk.com/hc/en-us/articles/40000368466196-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Client-Configuration)
- [*Filesystem Encryption for Linux Using Fortanix Data Security Manager - Monitoring*](https://fortanix.zendesk.com/hc/en-us/articles/43705621375636-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Monitoring)
- Filesystem Encryption Linux Using Fortanix Data Security Manager - Integrations with Application
  - [*Filesystem Encryption for Linux Using Fortanix Data Security Manager - Integration with Network File System (NFS) Server*](https://fortanix.zendesk.com/hc/en-us/articles/40000813073044-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Integration-with-Network-File-System-NFS-Server)
- [*Filesystem Encryption Linux Using Fortanix Data Security Manager - Troubleshooting*](https://fortanix.zendesk.com/hc/en-us/articles/40000688084884-Filesystem-Encryption-for-Linux-Using-Fortanix-Data-Security-Manager-Troubleshooting)

Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface.