diff --git a/website/source/guides/security/encryption.html.md b/website/source/guides/security/encryption.html.md index 05315c4db..6eda025ff 100644 --- a/website/source/guides/security/encryption.html.md +++ b/website/source/guides/security/encryption.html.md @@ -17,7 +17,8 @@ RPC. Enabling gossip encryption only requires that you set an encryption key when starting the Nomad server. The key can be set via the [`encrypt`](/docs/configuration/server.html#encrypt) parameter: the value -of this setting is a server configuration file containing the encryption key. The same encryption key should be used on every server in the cluster. +of this setting is a server configuration file containing the encryption key. +The same encryption key should be used on every server in a region. The key must be 16 bytes, base64 encoded. As a convenience, Nomad provides the [`nomad operator keygen`](/docs/commands/operator/keygen.html) command to