Table of Contents Table of Contents Title and Copyright Information Preface Documentation License Conventions Documentation Accessibility Access to Oracle Support for Accessibility Diversity and Inclusion 1 About Network-Bound Disk Encryption 2 Install and Configure a Tang Server Install the Tang Package and Enable the Tang Socket in Systemd Optionally Configure the Tang Server to Run on a Specified Port Update the Firewall Policy Start and Enable the Systemd Tang Socket Initialize Tang Signing Keys Rotate Tang Keys 3 Perform Automated Encryption and Decryption With Clevis Install and Test Clevis Use Clevis With LUKS Bind Clevis to a LUKS Slot Verify Clevis Integration With LUKS Update Clevis for Tang Key Rotation Unbind Clevis From a LUKS Slot