Fortanix Data Security Manager (DSM) 5.2.2938.3473 release provides an overview of resolved issues.
WARNING
If you want to upgrade Fortanix DSM to version 5.2.2938.3473, your current DSM version must be at least 4.36 patch 5*.
Downgrade from 5.2.2938.3473 to any prior version is not supported due to Kubernetes and Kernel upgrades.
The security fix included in this patch release may cause a performance degradation and increased operation latency when executing requests from client applications. The impact will vary across operations and cryptographic algorithms.
*The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.2.2938.3473.
NOTE
The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix support if you are planning an upgrade.
The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.
If your Fortanix DSM version is 5.0 or later, then the HSM Gateway version must also be 5.0 or later. Similarly, if the HSM Gateway version is 5.0 or later, then your Fortanix DSM version must be 5.0 or later.
1. Security Fixes
Fixed an issue where certain validation checks for enclave build artifacts were not consistently executed (JIRA: PROD-11281).
2. Bug Fixes
Fixed an issue where upgrading from Fortanix DSM 5.0 and later could cause package upload failures from the DSM UI, resulting in HTTP 400 or HTTP 500 errors (JIRA: ES-599).
3. Known Issues
When using an external load balancer configured with HTTP-based health checks on port 4445 (for example,
GET /sys/v1/healthor/health), the endpoint returns an HTTP 404 (Not Found) response starting from DSM version 5.2 (JIRA: RODE-580).
For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the DSM 5.2 release notes.
4. Installation
To install the DSM Runtime Encryption® SGX (on-prem/Azure) and Software (AWS/Azure) packages, Download Here.