Release Notes for CTE UserSpace

New Features and Enhancements

• CTE Workflow support

  CTE-U now supports CipherTrust Transparent Encryption workflows with CipherTrust Manager 2.10 and subsequent versions

• Migration Support

  Support migration of CTE UserSpace 8.x and 9.x to CTE UserSpace 10.0 with pfmigrate utility

• CTE-U Licensing Model

  See CTE UserSpace Licensing Model for more information.

• Oracle ASM | Block device support

  Support for Encrypting Oracle ASM devices. Block device support works the same on CTE-U as it does for CipherTrust Transparent Encryption, except that CTE-U does not support access controls on block devices.

Known Issues

• AGT-34183: VTE-FUSE:Moas test fails on reading a urandom character file from fuse.cte path

  CTE-U does not support creating character device nodes inside of a CTE-U GuardPoint and accessing it as a character device.

  Work-around:

  Create the character device node outside of the GuardPoint so that you can read and write from it.

• AGT-40489: CTE-U is unable to guard 1000 GuardPoint

  CTE-U runs out of memory when trying to guard over 1000 GuardPoints.

  Work-around

  Required system memory is a minimum of 100MB/GP.

• AGT-41588: Amazon linux2: CTE-U-secfs not starting automatically after CTE-U installed and registered

  CTE-U is not starting automatically after CTE-U installation and registration.

  Work-around

  Start the agent manually by typing: #/etc/cte/secfs start

• AGT-41819: Upgrade on Reboot version does not display on CipherTrust Manager

  This behavior will be fixed in a subsequent hotfix release.

• AGT-41841: CTE-U bad error messages

  Messages are not indications of errors and can be ignored. They will be removed in a subsequent releases.

• AGT-48524 [CS1506097] Using a Standard Policy with an XTS key, when user migrated from a CipherTrust Manager to another CipherTrust Manager, key stopped working