anchor.diff:  +
   [source,terminal]
   ----
  -$ cat << EOF > ./99-openshift-master-encryption.yaml
  +$ cat << EOF > ./99-openshift-master-tang-encryption.yaml
   apiVersion: machineconfiguration.openshift.io/v1
   kind: MachineConfig
   metadata:
  
positive.code: ewogInVybCI6ICJodHRwczovL3RhbmcuZXhhbXBsZS5jb20iLAogInRocCI6ICJaUk1leTFjR3cwN3psVExHYlhuUWFoUzBHdTAiCn0K
  ----
  
  . Replace the “source” in the TPM2 example with the Base64 encoded file for the type of node to update:
  ** For worker nodes, use the following command:
  +
  [source,terminal]
  
negative.code:         path: /etc/clevis.json
  EOF
  ----
  
  . Add the `rd.neednet=1` kernel argument, as shown in the following example:
  +
  [source,yaml]
  ----
    apiVersion: machineconfiguration.openshift.io/v1
    kind: MachineConfig
    metadata:
      name: <node_type>-tang <.>
    spec:
      config:
        ignition:
          version: 3.1.0
      kernelArguments:
        - rd.neednet=1 <.>
  ----
  +
  <1> Use the name you defined in the previous examples based on the type of node you are configuring, for example: `name: worker-tang`.
  +
  <2> Required.
  
  . Continue with the remainder of the {product-title} deployment.
  