AWS filegateway documentation change
Summary
Added note about UEFI boot mode requirement and updated KVM section to reference boot configuration file and secure boot requirement
Security assessment
Documents secure boot configuration (UEFI with secure boot disabled) but doesn't address any specific vulnerability. The change provides operational guidance rather than fixing a security issue.
Diff
diff --git a/filegateway/latest/files3/Requirements.md b/filegateway/latest/files3/Requirements.md index 3ae2f7e15..2ee63f82f 100644 --- a//filegateway/latest/files3/Requirements.md +++ b//filegateway/latest/files3/Requirements.md @@ -430,0 +431,4 @@ You can run Storage Gateway on-premises as either a virtual machine (VM) applian +###### Note + +UEFI boot mode with secure boot disabled (loader_secure=no) is required for File Gateway 2.x, Volume Gateway 3.x, and Tape Gateway 3.x. An xml file is provided with each qcow download as a quick set-up configuration. + @@ -437 +441 @@ Storage Gateway supports the following hypervisor versions and hosts: - * Linux Kernel-based Virtual Machine (KVM) – A free, open-source virtualization technology. KVM is included in all versions of Linux version 2.6.20 and newer. Storage Gateway is tested and supported for the CentOS/RHEL 7.7, RHEL 8.6 Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS distributions. Any other modern Linux distribution may work, but function or performance is not guaranteed. We recommend this option if you already have a KVM environment up and running and you are already familiar with how KVM works. + * Linux Kernel-based Virtual Machine (KVM) – A free, open-source virtualization technology. KVM is included in all versions of Linux version 2.6.20 and newer. Storage Gateway is tested and supported for the CentOS/RHEL 7.7, RHEL 8.6 Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS distributions. Any other modern Linux distribution may work, but function or performance is not guaranteed. We recommend this option if you already have a KVM environment up and running and you are already familiar with how KVM works. Refer to the provided aws-storage-gateway.xml file for suggested boot configurations. UEFI boot mode with secure boot disabled (loader_secure=no) is required for File Gateway 2.x, Volume Gateway 3.x, and Tape Gateway 3.x.