New Features and Changes in Cloudera Navigator Encrypt

• Support for RHEL/CentOS 7.5 including kernel version 3.10.0-862.14.4

• Support for RHEL/CentOS 7.5 up to but not including kernel version 3.10.0-862.14.4

• Support for SLES 12 SP3

• The navencrypt exec command option has been deprecated.
• Support for RHEL 7.4
• Support for OEL 7.4

• Support for RHEL 6.9
• Support for CentOS 6.9
• Navigator Encrypt now supports preparing devices using a UUID, in addition to device name. This UUID is simply a symbolic link to the actual device, and is created when preparing a device with Navigator Encrypt during a navencrypt-prepare operation.

• Support for SLES 12 SP2
• Support for Ubuntu 16.04

• Support for RHEL 6.8, 7.3
• Support for SLES 12 SP1

• Support for OEL 7.2
• Several new commands have been added:
  • navencrypt-collect displays environment information for troubleshooting. For more information, see Collecting Navigator Encrypt Environment Information.
  • navencrypt-move --list-categories lists existing categories. For more information, see Listing Categories.
  • navencrypt restore-control-file restores the /etc/navencrypt/control file from Key Trustee Server. For more information, see Restoring Mount Encryption Keys (MEKs) and Control File.
  • navencrypt status --integrity validates the Navigator Encrypt configuration. For more information, see Validating Navigator Encrypt Configuration.
• Access control list (ACL) policy files now support comments. For more information, see Adding ACL Rules.

• Support for RHEL 7.2
• Support for SLES 11 SP4
• Support for Debian 7.8
• Support for Ubuntu 14.04.3

An issue has also been fixed. See Issues Fixed in Cloudera Navigator Encrypt 3.9.0.

• Support for RHEL 7.1
• Support for automatically mounting loop devices on boot (see Block-Level Encryption with a Loop Device for details)
• Automatic failover for high availability Key Trustee Servers (see Registering with Key Trustee Server for details)
• The ability to restore deleted local mount encryption keys (MEKs) from Key Trustee Server by UUID

• A number of issues have been fixed. See Issues Fixed in Cloudera Navigator Encrypt 3.7.1.

• Migration utility to migrate zNcrypt to Cloudera Navigator Encrypt

• The kernel module is renamed from zncrypt-kernel-module to navencrypt-kernel-module.