aboutsummaryrefslogtreecommitdiff
path: root/documentation
diff options
context:
space:
mode:
authorBenedict Reuschling <bcr@FreeBSD.org>2026-06-27 14:16:39 +0000
committerBenedict Reuschling <bcr@FreeBSD.org>2026-06-27 14:48:33 +0000
commitee930e81a02548fe7a5881fdaf385754a3dff07d (patch)
tree970c95a0638020ee5f65f575646098b0da7f49ac /documentation
parent108c7b0b9672e91585430ac8c12cfa6ab5d443a3 (diff)
Diffstat (limited to 'documentation')
-rw-r--r--documentation/content/en/books/handbook/disks/_index.adoc11
1 files changed, 9 insertions, 2 deletions
diff --git a/documentation/content/en/books/handbook/disks/_index.adoc b/documentation/content/en/books/handbook/disks/_index.adoc
index db966c3f67..1a83ba8f98 100644
--- a/documentation/content/en/books/handbook/disks/_index.adoc
+++ b/documentation/content/en/books/handbook/disks/_index.adoc
@@ -1912,7 +1912,7 @@ This control utility adds some features and uses a different scheme for doing cr
It provides the following features:
* Utilizes the man:crypto[9] framework and automatically uses cryptographic hardware when it is available.
-* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBCAES.
+* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBC.
* Allows the root partition to be encrypted. The passphrase used to access the encrypted root partition will be requested during system boot.
* Allows the use of two independent keys.
* It is fast as it performs simple sector-to-sector encryption.
@@ -2078,7 +2078,14 @@ To encrypt the swap partition using man:gbde[8], add the `.bde` suffix to the sw
/dev/ada0s1b.bde none swap sw 0 0
....
-To instead encrypt the swap partition using man:geli[8], use the `.eli` suffix:
+To instead encrypt the swap partition using man:geli[8], initialize the device with a onetime key:
+
+[source,shell]
+....
+# geom eli onetime -d /dev/ada0s1b
+....
+
+Afterwards, add a line for the device with the `.eli` suffix to [.filename]#/etc/fstab#:
[.programlisting]
....