Skip to content

Commit 53c185d

Browse files
BZ2031163: change the storage location for Tang server keys
1 parent 83b6b67 commit 53c185d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/nbde-backing-up-server-keys.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
[id="nbde-backing-up-server-keys_{context}"]
66
= Backing up keys for a Tang server
77

8-
The Tang server, by default, stores its keys in the `/usr/libexec/tangd-keygen` directory. Back up the contents of this directory to enable recovery in the event of the loss of the Tang server. The keys are sensitive and since they are able to perform the boot disk decryption of all hosts that have used them, the keys must be protected accordingly.
8+
The Tang server uses `/usr/libexec/tangd-keygen` to generate new keys and stores them in the `/var/db/tang` directory by default. To recover the Tang server in the event of a failure, back up this directory. The keys are sensitive and because they are able to perform the boot disk decryption of all hosts that have used them, the keys must be protected accordingly.
99

1010
.Procedure
1111

0 commit comments

Comments
 (0)