Browse Source

Add link to the keygen command

pull/9106/head
Kent 'picat' Gruber 4 years ago
parent
commit
05b34a3cf0
  1. 4
      website/pages/docs/security/security-models/core.mdx

4
website/pages/docs/security/security-models/core.mdx

@ -163,8 +163,8 @@ environment and adapt these configurations accordingly.
- **Gossip Encryption** - A shared, base64-encoded 32-byte symmetric key is required to [encrypt Serf gossip
communication](https://learn.hashicorp.com/tutorials/consul/gossip-encryption-secure) within a cluster using
AES GCM. The key size determines which AES encryption types to use; 16, 24, or 32 bytes to select AES-128, AES-192,
or AES-256 respectively. 32-byte keys are ultimately preferable and is the default size generated by the `keygen`
command. This key should be
or AES-256 respectively. 32-byte keys are ultimately preferable and is the default size generated by the
[`keygen`](/commands/keygen) command. This key should be
[regularly rotated](https://support.hashicorp.com/hc/en-us/articles/360044051754-Consul-Gossip-Key-Rotation) using
the builtin [keyring management](/commands/keyring) features of Consul.

Loading…
Cancel
Save