Skip to content

Commit

Permalink
Merge branch 'master' into PD-1055-Add-Fast-Deduplication-Content
Browse files Browse the repository at this point in the history
  • Loading branch information
micjohnson777 committed Jan 28, 2025
2 parents 259c19f + 11ebe05 commit 30786a7
Show file tree
Hide file tree
Showing 12 changed files with 39 additions and 30 deletions.
5 changes: 2 additions & 3 deletions content/SCALE/GettingStarted/SCALEReleaseNotes.md
Original file line number Diff line number Diff line change
Expand Up @@ -65,8 +65,6 @@ More details are available from [Software Releases]({{< relref "/TrueNASUpgrades
### Upgrade Paths (Anticipated)
<!--
{{< include file="/static/includes/25.04UpgradeMethods.md" >}}
See the <a href="https://www.truenas.com/software-status/" target="_blank">TrueNAS Software Status</a> page for recommendations about which software version to use based on your user type.
-->

{{< include file="/static/includes/SCALEUpgradePaths.md" >}}
Expand Down Expand Up @@ -94,7 +92,8 @@ Enterprise customers should [contact Support](https://www.truenas.com/docs/scale
-->

## Component Versions
Click the component version number to see the latest release notes for that component.
Component version numbers below are updated to reflect the latest TrueNAS 24.05 release.
Click the component version number to see release notes for that component.

{{< truetable >}}
| Component | Version |
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,26 +13,30 @@ keywords:

The **Certificate Authorities** widget lets users set up a certificate authority (CA) that certifies the ownership of a public key by the named subject of the certificate.

{{< trueimage src="/images/SCALE/Credentials/AddCertificateAuthorityScreen.png" alt="Add Certificate Authority Screen" id="Add Certificate Authority Screen" >}}

To add a new CA:

First, add the name and select the type of CA.
The **Identifier and Type** step lets users name the CA and choose whether to create a new CA or import an existing CA.
Users can also select a predefined certificate extension from the **Profiles** drop-down list.

Users can check **Add To Trusted Store** to add the CA to the TrueNAS trusted certificate store. Services on TrueNAS automatically recognize and trust CAs when you enable this option. This feature simplifies certificate management for environments with multiple services relying on the same CA, reducing repeated manual configuration. Users with strict certificate management requirements or a preference for manually controlling trusted CAs may benefit from leaving this option disabled.

Next, enter the certificate options. Select the key type. The **Key Type** selection changes the settings displayed.
The **Certificate Options** step provides options for choosing what type of private key to use (as well as the number of bits in the key used by the cryptographic algorithm), the cryptographic algorithm the CA uses, and how many days the CA lasts.

Now enter the certificate subject information.
The **Certificate Subject** step lets users define the location, name, and email for the organization using the certificate.
The **Certificate Subject** step lets users define the location, name, and email of the organization using the certificate.
Users can also enter the system [fully-qualified hostname (FQDN)](https://kb.iu.edu/d/aiuv) and any additional domains for multi-domain support.

Lastly, enter any extra constraints you need for your scenario.
The **Extra Constraints** step contains certificate extension options.

* **Basic Constraints** when enabled this limits the path length for a certificate chain.
* **Authority Key Identifier** when enable provides a means of identifying the public key corresponding to the private key used to sign a certificate.
* **Basic Constraints** limits the path length for a certificate chain.
* **Authority Key Identifier** provides a means of identifying the public key corresponding to the private key used to sign a certificate.
* **Key Usage** when enabled defines the purpose of the public key contained in a certificate.
* **Extended Key Usage** when enabled it further refines key usage extensions.
* **Extended Key Usage** further refines key usage extensions.

Review the CA options. If you want to change something Click **Back** to reach the screen with the setting option you want to change, then click **Next** to advance to the **Confirm Options** step.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ tags:
- certificates
---

The **Certificate Authorities** widget on the **Credentials > Certificates** screen displays certificate authorities(CAs) added to TrueNAS, and allows you to add new CAs, or download, delete, or edit the name of an existing CA.
The **Certificate Authorities** widget on the **Credentials > Certificates** screen displays certificate authorities(CAs) added to TrueNAS and allows you to add new CAs, or download, delete, or edit the name of an existing CA.

![CertificateAuthoritiesWidgetNoCAs](/images/SCALE/Credentials/CertificateAuthoritiesWidgetNoCAs.png "Certificate Authorities Widget No CAs")

Expand All @@ -21,6 +21,7 @@ Each CA listed on the widget is a link that opens the **Edit CA** screen.
**Add** opens the **[Add CA](#add-ca-wizard-screens)** wizard that steps you through setting up a certificate authority (CA) that certifies the ownership of a public key by the named subject of the certificate.

## Add CA Wizard Screens

The **Add CA** wizard screens step users through configuring a new certificate authority on TrueNAS.
The wizard has five different configuration screens, one for each step in the CA configuration process:

Expand Down Expand Up @@ -48,6 +49,7 @@ The selection in **Type** changes setting options on this screen, the **Certific
| **Name** | Required. Enter a descriptive identifier for this certificate authority(CA). |
| **Type** | Select the type of CA from the dropdown list. Options are **Internal CA**, **Intermediate CA**, and **Import CA**. **Internal CA** functions like a publicly trusted CA to sign certificates for an internal network. They are not trusted outside the private network. **Intermediate CA** lives between the root and end entity certificates and its main purpose is to define and authorize the types of certificates you can request from the root CA. **Import CA** allows you to import an existing CA onto the system. For more information see [What are Subordinate CAs and Why Would You Want Your Own?](https://www.globalsign.com/en/blog/what-is-an-intermediate-or-subordinate-certificate-authority). |
| **Profiles** | Displays if **Internal CA** or **Intermediate CA** are set in **Type**. Select a predefined certificate extension from the dropdown list. |
| **Add To Trusted Store** | Check this option if you want to add the CA to the TrueNAS trusted certificate store. Services on TrueNAS automatically trust CAs with this option enabled. |
{{< /truetable >}}
{{< /expand >}}

Expand All @@ -73,7 +75,7 @@ The **Key Type** selection changes fields displayed. **RSA** is the default sett
{{< /expand >}}

### Certificate Subject Options
The **Certificate Subject** settings define the location, name, and email for the organization using the certificate.
The **Certificate Subject** settings define the location, name, and email of the organization using the certificate.
Users can also enter the system [fully-qualified hostname (FQDN)](https://kb.iu.edu/d/aiuv) and any additional domains for multi-domain support.

The **Certificate Subject** settings do not display if **Type** on the **Identifier and Type** screen is set to **Import CA**.
Expand All @@ -97,15 +99,15 @@ The **Certificate Subject** settings do not display if **Type** on the **Identif

### Extra Constraints Options
The **Extra Constraints** options contain certificate extension options.
* **Basic Constraints** that when enabled limits the path length for a certificate chain.
* **Authority Key Identifier** that when enabled provides a means of identifying the public key corresponding to the private key used to sign a certificate.
* **Key Usage** that when enable defines the purpose of the public key contained in a certificate.
* **Extended Key Usage** that when enable to further refines key usage extensions.
* **Basic Constraints** limits the path length for a certificate chain.
* **Authority Key Identifier** provides a means of identifying the public key corresponding to the private key used to sign a certificate.
* **Key Usage** defines the purpose of the public key contained in a certificate.
* **Extended Key Usage** further refines key usage extensions.

The **Extra Constraints** settings change based on the selection in **Type** on the **Identifier and Type** screen.

#### Extra Constraints - Internal or Intermediate CA
After selecting **Basic Constraints**, **Authority Key Identifier**, **Extended Key Usage**, or **Key Usage**, each displays more settings that option needs.
After selecting **Basic Constraints**, **Authority Key Identifier**, **Extended Key Usage**, or **Key Usage**, each displays more settings that the option needs.
{{< expand "Click Here for More Information" "v" >}}

![AddCAExtraConstraintsAllExpanded](/images/SCALE/Credentials/AddCAExtraConstraintsAllExpanded.png "Add CA Internal Certificate")
Expand Down
3 changes: 3 additions & 0 deletions data/properties/scale-downloads.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -115,6 +115,9 @@ majorVersions:
majorVersion: "24.10 (Electric Eel)"
releaseName: "Electric Eel"
releases:
- name: "24.10.2"
link: "https://download.truenas.com/TrueNAS-SCALE-ElectricEel/24.10.2/"
date: "2024-01-28"
- name: "24.10.1"
link: "https://download.truenas.com/TrueNAS-SCALE-ElectricEel/24.10.1/"
date: "2024-12-17"
Expand Down
9 changes: 2 additions & 7 deletions data/properties/scale-releases.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,16 +17,11 @@ majorVersions:
name: "TrueNAS 24.10 - Electric Eel"
releaseName: "Electric Eel"
releases:
- name: "24.10.1"
type: "Maintenance"
link: "https://www.truenas.com/docs/scale/24.10/gettingstarted/scalereleasenotes/#24101-changelog"
releaseDate: "2024-12-17"
latest: true
- name: "24.10.2"
type: "Maintenance"
link: ""
link: "https://www.truenas.com/docs/scale/24.10/gettingstarted/scalereleasenotes/#24102-changelog"
releaseDate: "2025-01-28"
latest: false
latest: true
- lifecycle: "Next"
name: "TrueNAS 25.04 - Fangtooth"
releaseName: "Fangtooth"
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/images/TrueNAS_Community_Edition.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/images/TrueNAS_Community_Edition_White.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/images/TrueNAS_Enterprise.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/images/TrueNAS_Enterprise_White.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
20 changes: 13 additions & 7 deletions static/includes/SCALEUpgradePaths.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,9 +53,15 @@ Users can skip major versions with a fresh ISO install followed by a configurati
Carefully review release notes for each skipped major version before upgrading, noting any service deprecations or significant changes that impact the previous configuration.
Consider stopping at major versions with significant impacts to address changes before continuing the upgrade path or be prepared to manually reconfigure incompatibilities on the latest target version.

{{< hint type=note >}}
This chart shows the basic update path to and from the latest release of each TrueNAS major version.
Depending on your use case and risk tolerance, some users may prefer to remain on an earlier minor or major version for a period of time before updating.
Visit the <a href="https://www.truenas.com/software-status/" target="_blank">TrueNAS Software Status</a> page for recommendations on which software version to use, tailored to user types ranging from Developer to Mission Critical.
{{< /hint >}}

<div class="section-box" id="scale-upgrade-paths" style="padding: 0 40px 40px 40px; margin-bottom: 20px;">
<div class="upgrade-paths-container">
<img src="/images/tn-openstorage-logo.png" style="box-shadow: none; max-width: 225px; padding-bottom: 20px; padding-top: 40px;" title="TrueNAS" alt="TrueNAS">
<img src="/images/TrueNAS_Community_Edition.png" style="box-shadow: none; max-width: 225px; padding-bottom: 20px; padding-top: 40px;" title="TrueNAS Community Edition" alt="TrueNAS Community Edition">
<div class="scroll-container" id="scrollContainer1">
<div class="chart-wrapper">
{{< mermaid class="mermaid_sizing" >}}
Expand All @@ -68,25 +74,25 @@ Consider stopping at major versions with significant impacts to address changes
E["22.12.4.2 (Bluefin)"] -->|update| F
F["23.10.2 (Cobia)"] -->|update| G
G["24.04.2.5 (Dragonfish)"] -->|update| H
H["24.10.1 (Electric Eel)"] -->|"(anticipated)"| I
H["24.10.2 (Electric Eel)"] -->|"(anticipated)"| I
I["25.04.0 (Fangtooth)"]
{{< /mermaid >}}
</div>
</div>
</div>
<div class="upgrade-paths-container">
<img src="/images/tn-enterprise-logo.png" style="box-shadow: none; max-width: 225px; padding-bottom: 20px; padding-top: 40px;" title="TrueNAS Enterprise" alt="TrueNAS Enterprise">
<img src="/images/TrueNAS_Enterprise.png" style="box-shadow: none; max-width: 225px; padding-bottom: 20px; padding-top: 40px;" title="TrueNAS Enterprise" alt="TrueNAS Enterprise">
<div class="scroll-container" id="scrollContainer2">
<div class="chart-wrapper">
{{< mermaid class="mermaid_sizing" >}}
flowchart LR
A["11.3-U5"] -->|update| B
B["12.0-U8.1"] -->|update| C
C["13.0-U6.4"] -->|"(anticipated)"| F
C["13.0-U6.4"] -->|ISO install| F
C["13.0-U6.4"] -->|"(anticipated)"| G
D["23.10.2 (Cobia)"] -->|update| E
E["24.04.2.5 (Dragonfish)"] -->|"(anticipated)"| F
F["24.10.1 (Electric Eel)"] -->|"(anticipated)"| G
E["24.04.2.5 (Dragonfish)"] -->|update| F
F["24.10.2 (Electric Eel)"] -->|"(anticipated)"| G
G["25.04.0 (Fangtooth)"]
{{< /mermaid >}}
</div>
Expand Down Expand Up @@ -144,4 +150,4 @@ Consider stopping at major versions with significant impacts to address changes
const scrollContainer2 = document.getElementById('scrollContainer2');
addDragScroll(scrollContainer1);
addDragScroll(scrollContainer2);
</script>
</script>
4 changes: 2 additions & 2 deletions static/includes/SoftwareStatusPage.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
&NewLine;

{{< hint type=note >}}
The <a href="https://www.truenas.com/software-status/" target="_blank">Software Status</a> page shows the latest recommendations for using the various TrueNAS software releases.
{{< /hint >}}
Visit the <a href="https://www.truenas.com/software-status/" target="_blank">TrueNAS Software Status</a> page for recommendations on which software version to use, tailored to user types ranging from Developer to Mission Critical.
{{< /hint >}}

0 comments on commit 30786a7

Please sign in to comment.