diff --git a/source/reference/program/mongod.txt b/source/reference/program/mongod.txt index 49cb8cd6a88..b2c5468c013 100644 --- a/source/reference/program/mongod.txt +++ b/source/reference/program/mongod.txt @@ -2418,15 +2418,16 @@ inMemory Options Encryption Key Management Options ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -.. option:: --enableEncryption +.. option:: --enableEncryption *Default*: false .. versionadded:: 3.2 - Enables encryption for the WiredTiger storage engine. You must set - to ``true`` to pass in encryption keys and configurations. + Enables encryption for the WiredTiger storage engine. This option + must be enabled in order to pass in encryption keys and + configurations. .. include:: /includes/fact-enterprise-only-admonition.rst @@ -2469,7 +2470,7 @@ Encryption Key Management Options than* KMIP. Only set when managing keys via process other than KMIP. If data is already encrypted using KMIP, MongoDB will throw an error. - Requires :setting:`enableEncryption` to be ``true``. + Requires :option:`--enableEncryption`. .. include:: /includes/fact-enterprise-only-admonition.rst @@ -2484,7 +2485,7 @@ Encryption Key Management Options Include to use the key associated with the identifier as the system key. You can only use the setting the first time you enable encryption for the :binary:`~bin.mongod` instance. Requires - :setting:`enableEncryption` to be true. + :option:`--enableEncryption`. If unspecified, MongoDB will request that the KMIP server create a new key to utilize as the system key. @@ -2519,7 +2520,7 @@ Encryption Key Management Options .. versionadded:: 3.2 Hostname or IP address of key management solution running a KMIP - server. Requires :setting:`enableEncryption` to be true. + server. Requires :option:`--enableEncryption`. When connecting to the KMIP server, the :binary:`~bin.mongod` verifies that the specified :option:`--kmipServerName` matches the Subject Alternative @@ -2541,7 +2542,7 @@ Encryption Key Management Options Port number the KMIP server is listening on. Requires that a :setting:`kmipServerName` be provided. Requires - :setting:`enableEncryption` to be true. + :option:`--enableEncryption`. .. include:: /includes/fact-enterprise-only-admonition.rst