'\" t
.\"     Title: clevis-encrypt-file
.\"    Author: [FIXME: author] [see http://www.docbook.org/tdg5/en/html/author]
.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
.\"      Date: 08/23/2026
.\"    Manual: \ \&
.\"    Source: \ \&
.\"  Language: English
.\"
.TH "CLEVIS\-ENCRYPT\-FIL" "1" "08/23/2026" "\ \&" "\ \&"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
clevis-encrypt-file \- Encrypts using a file policy
.SH "SYNOPSIS"
.sp
\fBclevis encrypt file\fR CONFIG < PT > JWE
.SH "OVERVIEW"
.sp
The \fBclevis encrypt file\fR command encrypts using a file policy\&. Its only argument is the JSON configuration object\&.
.sp
Encrypting data using the file pin works like this:
.sp
.if n \{\
.RS 4
.\}
.nf
$ clevis encrypt file \*(Aq{"name":"/path/to/file"}\*(Aq < PT > JWE
.fi
.if n \{\
.RE
.\}
.sp
The given file must not exist yet\&.
.sp
To decrypt the data, just pass it to the \fBclevis decrypt\fR command:
.sp
.if n \{\
.RS 4
.\}
.nf
$ clevis decrypt < JWE > PT
.fi
.if n \{\
.RE
.\}
.SH "CONFIG"
.sp
This command uses the following configuration properties:
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.sp -1
.IP \(bu 2.3
.\}
\fBname\fR
(string) : The name to the file where the jwk is stored (REQUIRED)
.RE
.SH "BUGS"
.sp
Requires that directories for that file already exist\&.
.sp
Rather for educational purposes\&.
.SH "SEE ALSO"
.sp
\fBclevis\-decrypt\fR(1)