Enhanced Security

Enhanced Security adds a unified, ClusterVisor-managed approach to key security controls across your cluster, including:

• FIPS & SELinux Management
‍Enable, disable, or configure FIPS mode and SELinux for ClusterVisor-managed nodes.

• Full Compatibility
‍All ClusterVisor services and tools are validated to operate correctly with FIPS and SELinux enabled.

• Drive Encryption (At-Rest Protection)
‍Configure LUKS-based disk encryption across all nodes using:
• Tang (network-based unlock)
• TPMs
• Passcodes stored in ClusterVisor
• Manual passcode entry at boot

• File Access Policy Enforcement
‍Apply and manage fapolicyd configurations cluster-wide through a ClusterVisor configuration plugin.

As security requirements evolve, Enhanced Security will continue to expand based on customer needs.

‍