Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Amazon Elastic Kubernetes Service
Kubernetes Settings
OpenShift Kube API Server
OpenShift APIServer etcd encryption type
OpenShift APIServer etcd encryption type
An XCCDF Value
Details
Profiles
Prose
OpenShift APIServer etcd encryption type
OpenShift APIServer etcd encryption provider type to use for remediation. This variable is only applicable to remediations, and does not affect checks. This variable is set to 'aescbc' by default, which is supported across all OpenShift versions as the etcd encryption provider type. OpenShift 4.13 and newer support 'aesgcm'. Attempting to use 'aesgcm' on older versions of OpenShift will result in a failed remediation. Please make sure the encryption provider type you set is supported on the version of OpenShift you're using.