anchor.diff:  ewogInVybCI6ICJodHRwczovL3RhbmcuZXhhbXBsZS5jb20iLAogInRocCI6ICJaUk1leTFjR3cwN3psVExHYlhuUWFoUzBHdTAiCn0K
   ----
   
  -. Replace the “source” in the TPM2 example with the Base64 encoded file for the type of node to update:
  +. In the `openshift` directory, create master or worker files to encrypt disks for those nodes.
  +
   ** For worker nodes, use the following command:
   +
   [source,terminal]
  
positive.code:         path: /etc/clevis.json
  EOF
  ----
  . Continue with the remainder of the {product-title} deployment.
  
negative.code: for instructions. See link:https://youtu.be/2uLKvB8Z5D0[Securing Automated Decryption New Cryptography and Techniques]
  for a presentation on Tang.
  
  . Add kernel arguments to configure networking when you do the {op-system-first} installations for your cluster. For example, to configure DHCP networking, identify `ip=dhcp`, or set static networking when you add parameters to the kernel command line.
  
  [IMPORTANT]
  ====
  Skipping this step causes the second boot to fail.
  ====
  
  [start=4]
  . Install the clevis package, if it is not already installed:
  
  [source,terminal]
  ----
  $ sudo yum install clevis -y
  ----
  
  [start=5]
  . Generate a thumbprint from the Tang server.
  
  .. In the following command, replace the value of `url` with the Tang server URL:
  