How can I do this " Storage encryption for hosted applications with cryptctl" on Rocky or could I use SUSE as the server and have Rocky get the keys from here?
I basically want to do this:
- “Encryption keys are located on a central server”.
- “A client is a machine that has one or more encrypted partitions but does not permanently
store the necessary key to decrypt those partitions. For example, clients can be cloud or
otherwise hosted machines”
- “The server holds encryption keys that can be requested by clients to unlock encrypted