Manage config encryption Disable config encryption using TPM or recovery key sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --disable Enable config encryption using TPM sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --enable Load encrypted config volume using TPM or recovery key sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --load