Cryptographic Hardware setup for Intel RDRAND
-
/usr/bin/openssl engine -t -c
shows this ...
(rdrand) Intel RDRAND engine
[RAND]
[ available ]
(dynamic) Dynamic engine loading support
[ unavailable ]under
System - Advanced - Miscellaneous
Cryptographic & Thermal Hardwarechoooose what? (ipsec&openVPN runnin on box)
- none
- AES-NI CPU Based
- BSD Crypto Device
- AES-NI & BSD Crypto
br NP
-
it's not really important, that menu is only needed to load a kernel module for some systems (Others, such as AES-NI or glxsb on ALIX require choosing the appropriate module), anyway openssl will use it automatically as soon as it detect a compatible cpu
https://docs.netgate.com/pfsense/en/latest/hardware/cryptographic-accelerator-support.html -
thanks ... !
brNP
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.