diff options
Diffstat (limited to 'documentation')
| -rw-r--r-- | documentation/content/en/books/handbook/disks/_index.adoc | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/documentation/content/en/books/handbook/disks/_index.adoc b/documentation/content/en/books/handbook/disks/_index.adoc index db966c3f67..1a83ba8f98 100644 --- a/documentation/content/en/books/handbook/disks/_index.adoc +++ b/documentation/content/en/books/handbook/disks/_index.adoc @@ -1912,7 +1912,7 @@ This control utility adds some features and uses a different scheme for doing cr It provides the following features: * Utilizes the man:crypto[9] framework and automatically uses cryptographic hardware when it is available. -* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBCAES. +* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBC. * Allows the root partition to be encrypted. The passphrase used to access the encrypted root partition will be requested during system boot. * Allows the use of two independent keys. * It is fast as it performs simple sector-to-sector encryption. @@ -2078,7 +2078,14 @@ To encrypt the swap partition using man:gbde[8], add the `.bde` suffix to the sw /dev/ada0s1b.bde none swap sw 0 0 .... -To instead encrypt the swap partition using man:geli[8], use the `.eli` suffix: +To instead encrypt the swap partition using man:geli[8], initialize the device with a onetime key: + +[source,shell] +.... +# geom eli onetime -d /dev/ada0s1b +.... + +Afterwards, add a line for the device with the `.eli` suffix to [.filename]#/etc/fstab#: [.programlisting] .... |