AWS filegateway documentation change
Summary
Added requirement for UEFI boot with secure boot disabled (loader_secure=no) and reference to provided XML configuration. Updated KVM documentation with same requirement.
Security assessment
Explicitly documents secure boot configuration requirements. Disabling secure boot has security implications (reduced boot integrity) but isn't tied to a specific vulnerability. Adds documentation about security feature configuration.
Diff
diff --git a/filegateway/latest/filefsxw/Requirements.md b/filegateway/latest/filefsxw/Requirements.md index 323f538c5..ea03c1924 100644 --- a//filegateway/latest/filefsxw/Requirements.md +++ b//filegateway/latest/filefsxw/Requirements.md @@ -320,0 +321,4 @@ You can run Storage Gateway on-premises as either a virtual machine (VM) applian +###### Note + +UEFI boot mode with secure boot disabled (loader_secure=no) is required for File Gateway 2.x, Volume Gateway 3.x, and Tape Gateway 3.x. An xml file is provided with each qcow download as a quick set-up configuration. + @@ -327 +331 @@ Storage Gateway supports the following hypervisor versions and hosts: - * Linux Kernel-based Virtual Machine (KVM) – A free, open-source virtualization technology. KVM is included in all versions of Linux version 2.6.20 and newer. Storage Gateway is tested and supported for the CentOS/RHEL 7.7, RHEL 8.6 Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS distributions. Any other modern Linux distribution may work, but function or performance is not guaranteed. We recommend this option if you already have a KVM environment up and running and you are already familiar with how KVM works. + * Linux Kernel-based Virtual Machine (KVM) – A free, open-source virtualization technology. KVM is included in all versions of Linux version 2.6.20 and newer. Storage Gateway is tested and supported for the CentOS/RHEL 7.7, RHEL 8.6 Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS distributions. Any other modern Linux distribution may work, but function or performance is not guaranteed. We recommend this option if you already have a KVM environment up and running and you are already familiar with how KVM works. Refer to the provided aws-storage-gateway.xml file for suggested boot configurations. UEFI boot mode with secure boot disabled (loader_secure=no) is required for File Gateway 2.x, Volume Gateway 3.x, and Tape Gateway 3.x.