From 05b34a3cf09af0543db891577967174f1fde96f4 Mon Sep 17 00:00:00 2001 From: Kent 'picat' Gruber Date: Thu, 5 Nov 2020 16:34:32 -0500 Subject: [PATCH] Add link to the keygen command --- website/pages/docs/security/security-models/core.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/website/pages/docs/security/security-models/core.mdx b/website/pages/docs/security/security-models/core.mdx index 5b65c309b0..1c9e6251fc 100644 --- a/website/pages/docs/security/security-models/core.mdx +++ b/website/pages/docs/security/security-models/core.mdx @@ -163,8 +163,8 @@ environment and adapt these configurations accordingly. - **Gossip Encryption** - A shared, base64-encoded 32-byte symmetric key is required to [encrypt Serf gossip communication](https://learn.hashicorp.com/tutorials/consul/gossip-encryption-secure) within a cluster using AES GCM. The key size determines which AES encryption types to use; 16, 24, or 32 bytes to select AES-128, AES-192, - or AES-256 respectively. 32-byte keys are ultimately preferable and is the default size generated by the `keygen` - command. This key should be + or AES-256 respectively. 32-byte keys are ultimately preferable and is the default size generated by the + [`keygen`](/commands/keygen) command. This key should be [regularly rotated](https://support.hashicorp.com/hc/en-us/articles/360044051754-Consul-Gossip-Key-Rotation) using the builtin [keyring management](/commands/keyring) features of Consul.