anchor.diff:  +
   [source,terminal]
   ----
  -$ cat << EOF > ./99-openshift-master-encryption.yaml
  +$ cat << EOF > ./99-openshift-master-tang-encryption.yaml
   apiVersion: machineconfiguration.openshift.io/v1
   kind: MachineConfig
   metadata:
  
positive.code: for instructions. See link:https://youtu.be/2uLKvB8Z5D0[Securing Automated Decryption New Cryptography and Techniques]
  for a presentation on Tang.
  
  . Add kernel arguments to configure networking when you do the RHCOS installations for your cluster.
  If you miss this step, the second boot will fail.
  For example, to configure DHCP networking, identify `ip=dhcp`
  or set static networking when you add parameters to the kernel command line.
  
  . Install the clevis package, if it is not already installed:
  +
  [source,terminal]
  ----
  $ sudo yum install clevis -y
  ----
  
  . Generate a thumbprint from the Tang server.
  
  .. In the following command, replace the value of `url` with the Tang server URL:
  
negative.code: ewogInVybCI6ICJodHRwczovL3RhbmcuZXhhbXBsZS5jb20iLAogInRocCI6ICJaUk1leTFjR3cwN3psVExHYlhuUWFoUzBHdTAiCn0K
  ----
  
  . In the `openshift` directory, create master or worker files to encrypt disks for those nodes.
  
  ** For worker nodes, use the following command:
  +
  [source,terminal]
  