anchor.diff:  As of [cf-release v217](https://github.com/cloudfoundry/cf-release/releases/tag/v217), Cloud 
   Foundry enables encryption for all Consul traffic by default. 
   
  -To use SSL encryption, you must generate and add the following certificates and keys to your deployment manifest: 
  +To use SSL encryption, you must generate and add the following certificates and 
  +keys to your deployment manifest: 
   
   * `ca_cert`
   * `agent_cert` and `agent_key`
  
positive.code: 
  The `generate-consul-certs` script outputs files to the `./consul-certs` 
  directory. 
  You use the contents of these output files in [Step 3: Modify your Deployment Manifest](#manifest).
  
  ## <a id='encrypt-key'></a>Step 2: Generate encrypt_key ##
  
  Run `cat /dev/urandom | head -c 16 | base64` to generate and display a random 16-byte Base64-encoded value. 
  You use this value as the `encrypt_key` in [Step 3: Modify your Deployment Manifest](#manifest).
  
  Example:
  
  
negative.code:   * **AWS**: [Deploying Cloud Foundry on AWS with BOSH AWS Bootstrap](ec2/bootstrap-aws-vpc.html#deploy-cloudfoundry)
    * **OpenStack**: [Deploying Cloud Foundry on OpenStack using BOSH](openstack/install_cf_openstack.html#deploy-cf)
    * **vCloud**: [Deploying Cloud Foundry on vCloud using MicroBOSH or   BOSH](vcloud/deploy_cf.html#deploy-cf)
    * **vSphere**: [Deploying Cloud Foundry on vSphere using BOSH](vsphere/deploy_cf_vsphere.html#deploy-cf) 
  