Cryptographic Hardware setup for Intel RDRAND

noplan

/usr/bin/openssl engine -t -c

shows this ...

(rdrand) Intel RDRAND engine
[RAND]
[ available ]
(dynamic) Dynamic engine loading support
[ unavailable ]

under
System - Advanced - Miscellaneous
Cryptographic & Thermal Hardware

choooose what? (ipsec&openVPN runnin on box)

none
AES-NI CPU Based
BSD Crypto Device
AES-NI & BSD Crypto

br NP

kiokoman

it's not really important, that menu is only needed to load a kernel module for some systems (Others, such as AES-NI or glxsb on ALIX require choosing the appropriate module), anyway openssl will use it automatically as soon as it detect a compatible cpu
https://docs.netgate.com/pfsense/en/latest/hardware/cryptographic-accelerator-support.html

noplan

thanks ... !
brNP