anchor.diff:  [options="header"]
   |==========================================================================================
   | Name                      | Default      | Description
  -| `running_mode`            | `full`       | Continuously poll the server (`full`) or only poll once and exit (`once`).
  +| `running_mode`            | `full`       | Continuously poll the server (`full`), perform a full update cycle once and exit (`once`), only check for updates (`check`), only download updates (`download`) or only install updates (`install`).
   | `polling_sec`             | `10`         | Interval between polls (in seconds).
  -| `device_id`               |              | Device ID of the primary ECU. If left empty, a random name will be generated.
  -| `primary_ecu_serial`      |              | Serial number of the primary ECU. If left empty, a random serial will be generated.
  -| `primary_ecu_hardware_id` |              | The hardware ID of the primary ECU (e.g., `"raspberry-pi"`). If left empty, the hostname of the device will be used.
   | `director_server`         |              | Director server URL. If empty, set to `tls.server` with `/director` appended.
   | `repo_server`             |              | Image repository server URL. If empty, set to `tls.server` with `/repo` appended.
   | `key_source`              | `"file"`     | Where to read the device's private key from. Options: `"file"`, `"pkcs11"`.
  -| `key_type`                | `"RSA2048"` | Type of cryptographic keys to use. Options: `"ED25519"`, `"RSA2048"`, `"RSA4096"`.
  +| `key_type`                | `"RSA2048"`  | Type of cryptographic keys to use. Options: `"ED25519"`, `"RSA2048"`, `"RSA3072"` or `"RSA4096"`.
   | `legacy_interface`        |              | Path to an executable interface for communicating with legacy secondary ECUs. See link:legacysecondary.adoc[] for more information.
   |==========================================================================================
   
  
positive.code: | `uptane_private_key_path` |         | Path to the device's private key.
  | `uptane_public_key_path`  |         | Path to the device's public key.
  | `tls_cacert_path`         |         | Path to the TLS root CA certificate.
  | `tls_pkey_id`             |         | Path to the TLS private key.
  | `tls_clientcert_id`       |         | Path to the TLS client certificate.
  |==========================================================================================
  
  == `telemetry`
  
negative.code: | `uptane_key_id`      |         | Key ID of the Uptane key in the HSM.
  | `tls_cacert_id`      |         | Key ID of the TLS root CA certificate for authenticating the server.
  | `tls_pkey_id`        |         | Key ID of the client's TLS private key.
  | `tls_clientcert_id`  |         | Key ID of the client's TLS certificate.
  |==========================================================================================
  
  == `tls`
  