Skip to main content

New Install - Encryption

You now have the option to encrypt your p12 passphrase that will be stored in your cn-config.yaml file which is used by nodectl to understand the configuration of your Node.

If you do not encrypt, the passphrase will be stored in plain text format in the file. It is up to you if you want to enable encryption, however it is recommended.

Confirm Encryption

We can press Enter to accept the default, y+Enter, or n+Enter.

------- * ENCRYPTION SERVICES * --------

Do you want to encrypt the passphrase in your cn-config.yaml configuration file?
Encrypt? [y]:

You can can also encrypt (or disable encryption) at any time by utilizing the encryption guide.

Automated Encryption

nodectl will begin the encryption.

Derive a seed phrase to use with the encryption

seed phrase [deriving] ........................ complete

Remove and destroy the seed phrase because it is a one-time use element of the encryption process.

seed phrase [redacting] ........................ complete

Remove all elements that helped to prepare the encryption hash

seed phrase [forgetting] ........................ complete

Encryption is complete

seed phrase [finished] ........................ complete

Update the configuration

Building encryption elements [global] ......... completed
Building encryption elements [dag-l0] ......... completed

Configuration changes applied ................. successfully
Building encryption element ................... completed

The screen will clear...