# MinIO Client RELEASE.2026-04-11T06-53-06Z

Released: April 11, 2026

This release introduces several new commands including `mc encrypt update` for in-place encryption key rotation, `mc table migrate` for Iceberg catalog migration, and `mc admin accesskey diagnose` for troubleshooting access denied errors. The `mc admin config` commands now support intuitive dot-notation navigation with tree views, and `mc table` commands adopt a unified filesystem-like path syntax.

---

## Downloads

### Binary Downloads

| Platform | Architecture | Download |
| -------- | ------------ | -------- |
| Linux | amd64 | [mc](https://dl.min.io/aistor/mc/release/linux-amd64/mc) |
| Linux | arm64 | [mc](https://dl.min.io/aistor/mc/release/linux-arm64/mc) |
| macOS | arm64 | [mc](https://dl.min.io/aistor/mc/release/darwin-arm64/mc) |
| macOS | amd64 | [mc](https://dl.min.io/aistor/mc/release/darwin-amd64/mc) |
| Windows | amd64 | [mc.exe](https://dl.min.io/aistor/mc/release/windows-amd64/mc.exe) |

### Container Images

- `quay.io/minio/aistor/mc:RELEASE.2026-04-11T06-53-06Z`
- `quay.io/minio/aistor/mc:latest`
- `quay.io/minio/aistor/mc:RELEASE.2026-04-11T06-53-06Z.fips`

### Homebrew (macOS/Linux)

```bash
brew install minio/stable/mc
```

---

## Breaking Changes

- The `mc console` interactive TUI command has been removed. The TUI is now available as a standalone project (#427)

---

## New Features

- **Encryption key rotation**: New `mc encrypt update` subcommand enables in-place object encryption key rotation (SSE-S3/SSE-KMS to SSE-KMS) with `--kms-key`, `--use-bucket-key`, and `--version-id` flags, without re-uploading objects (#397)

- **Iceberg catalog migration**: New `mc table migrate` command migrates Iceberg catalog metadata (namespaces, tables, and views) from external catalogs (REST, Hive, Glue, SQL, Nessie) to MinIO AIStor Tables. Supports dry-run previews, namespace/table filtering, resume/retry workflows, and optional `--delete-source` (#402)

- **Admin config dot notation**: `mc admin config get/set/reset` now supports dot notation for navigating subsystem configuration (e.g., `log.api.webhook` instead of `log_api_webhook`). New `--tree` / `-v` flag displays the subsystem hierarchy as a visual tree, and `--string` outputs raw config for piping (#406)

- **Access key diagnostics**: New `mc admin accesskey diagnose` command displays the full authentication chain for a service account (SA status, parent user status, direct policies, group memberships) and produces actionable findings that pinpoint root causes of 403 Access Denied errors (#444)

- **Cluster services info**: New `mc admin cluster services` command displays the status and configuration of cluster services including LDAP, loggers, audit loggers, notification targets, and KMS. Supports `--json` and `--export` flags (#448)

- **Empty group creation**: `mc admin group add` now allows creating empty groups without specifying members (e.g., `mc admin group add myminio finance`). Members can be added later with subsequent calls (#460)

---

## Improvements

- **Unified table path syntax**: All `mc table` commands now support a unified filesystem-like path (`alias/warehouse/namespace/table`) replacing space-separated positional arguments. Nested namespaces of arbitrary depth are supported. The old positional syntax is preserved as a legacy fallback (#383)

- **Tables command alias**: `mc tables` is now accepted as an alias for `mc table` (#412)

- **Backward-compatible top RPC display**: `mc support top rpc` now handles older server data formats gracefully (#451)

---

## Bug Fixes

- Fixed `mc admin trace` and `mc admin scanner trace` fatally exiting when the remote server disconnects. These commands now automatically retry the connection with a status indicator showing reconnection attempts (#469)

- Fixed `mc support top net` displaying incorrect per-interface network statistics on multi-NIC servers. Each interface now shows as a separate row with its real OS interface name and individual throughput rates (#466)

- Fixed `mc admin heal --recursive --dry-run` showing grey (unknown) status for healthy buckets. Buckets with no drive issues now correctly display as green/healthy (#464)

- Fixed `mc ls` issuing a redundant duplicate `GetBucketLocation` request when listing a non-existent bucket (#447)

- Fixed progress bar accuracy across `mc mirror`, `mc cp`, and `mc pipe` commands. Progress bars now exclude enumeration time from transfer speed calculations, prevent percentage from exceeding 100% during upload retries, correctly report bandwidth for pipe uploads and server-side copies, and fix several data races in concurrent progress tracking (#438)

---

## Security & Compliance

### Software Bill of Materials (SBOM)

This release includes comprehensive SBOM documentation in multiple formats:

- [SPDX JSON](sbom-RELEASE.2026-04-11T06-53-06Z.spdx.json) - Standard SBOM format
- [CycloneDX JSON](sbom-RELEASE.2026-04-11T06-53-06Z.cyclonedx.json) - Security scanner compatible
- [Go Modules](go-modules-RELEASE.2026-04-11T06-53-06Z.txt) - Human-readable dependency list

SBOM files document all direct and transitive dependencies for security auditing and compliance requirements.

---

## Upgrade Instructions

To upgrade mc:

1. Download the latest binary for your platform from the Downloads section above
2. Replace your existing mc binary
3. Verify the version: `mc --version`

Your existing alias configurations will be preserved.

### New Command Options

- `mc encrypt update --kms-key KEY` - In-place encryption key rotation
- `mc table migrate` - Iceberg catalog migration with `--dry-run`, `--filter`, `--delete-source`
- `mc admin config get/set/reset` - Dot notation paths, `--tree`, `-v`, `--string` flags
- `mc admin accesskey diagnose ACCESS_KEY` - Authentication chain diagnostics
- `mc admin cluster services ALIAS` - Cluster service status with `--json`, `--export`
- `mc admin group add ALIAS GROUP` - Empty group creation (no members required)

### Breaking Changes

- `mc console` has been removed from this repository and is now a standalone project

### Support

For enterprise support:

- SUBNET Support: https://subnet.min.io
- Documentation: https://docs.min.io/enterprise/aistor-object-store/reference/cli/
