What is new in version 3.0.0?

This is an overview of the features and changes added in the latest version of Nerve. For an extensive list of all changes, refer to the release notes.

🛡️ Nerve Edge Software Release: Fortifying the Edge with Secure Boot and Disk Encryption. Nerve is getting a major security upgrade

In our latest release, we’re proud to introduce two powerful features designed to elevate the integrity and confidentiality of edge deployments: Secure Boot and Disk Encryption. Nerve Edge now offers even stronger safeguards for your edge operations. These enhancements mark a significant step forward in our mission to deliver secure, resilient, and scalable edge computing. Checkout our whitepaper about Cybersecurity and how Nerve can help you fulfill the latest regulation.

See guidelines for more details on the workflow, product on protection features and the updated compliance for more details.

🔐 Secure Boot: Trust Starts at Power-On

In edge environments where physical access to devices is more likely, Secure Boot acts as a foundational defense against tampering and rootkit attacks. It guarantees that your Nerve Edge system boots into a known and trusted state—every time.

Secure Boot ensures that only trusted, signed software is allowed to run during the system startup process. By verifying the digital signature of the bootloader and kernel, this feature prevents unauthorized or malicious code from executing at the most critical stage of system initialization.

Only if Secure Boot completes successfully are the decryption keys released from the Trusted Platform Module (TPM). These keys are required to unlock the encrypted disk partitions. If Secure Boot fails or is tampered with, the TPM withholds the keys, keeping the partitions inaccessible and the data protected.

🧊 Disk Encryption: Data Confidentiality at Rest

Industrial Machines and the Edge devices often operate in remote locations. Disk encryption protects sensitive workloads, configurations, and logs from unauthorized access, aligning with industry best practices for data protection and compliance.

All workload data and associated Docker volumes stored on the device are protected through advanced disk encryption. This ensures that, even in the event of device loss or theft, the information remains securely locked and inaccessible without the correct decryption keys.

Support for Moxa DRP-A100-E4-2L4C-T

The Moxa DRP-A100-E4-2L4C-T is now a Nerve supported device. See the device page here.