What's new in version 2.1.11

Updated image

You can get the IBM Hyper Protect Container Runtime version 2.1.11 image from Passport Advantage. For more information, see Downloading the IBM Hyper Protect Container Runtime image.

Please use the certificates for certificate verification, image attestation and create the contract with the encryption certificate to work with the released image.

Package update highlights:

KVM guest in IBM Secure Execution mode is supported with Ubuntu 22.04/24.04. IBM Hyper Protect Container Runtime version 2.1.11 image is based out of ubuntu 24.04.
The kernel version of IBM Hyper Protect Container Runtime version 2.1.11 image is 6.8.0-48.48.

z16 Host Attestation

When VSI is running on a Z16 or higher, the boot process attempts to perform Ultravisor attestation to verify that the image is running on the correct host. The Ultravisor attestation produces an evidence that it is revealed through the Attestation Document.

For more information, see Attestation.

Crypto passthrough

The HSMs can now be accessed in the IBM Hyper Protect Virtual Server instance through Crypto Passthrough enabled by Secure Execution. For information, see Crypto Passthrough

Base 64 support for rsyslog configuration

The syslog certificates and the key can be given in base64 format. For more information, see Syslog