# How to encrypt update artifact?

**URL:** <https://hub.mender.io/t/how-to-encrypt-update-artifact/3136>\
**Category:** General Discussions\
**Tags:** update-modules, mender-artifact, signature-artifacts, encryption\
**Created:** [January 27, 2021, 11:04am UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136 "2021-01-27T11:04:11Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![danie](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/danie/32/620_2.png) [@danie](https://hub.mender.io/u/danie)\
**Post date:** [January 27, 2021, 11:04am UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/1 "2021-01-27T11:04:11Z")

</div>

Hi,

Does mender support update artifact to be encrypted along with the signature verification? Did someone tried this yet?

Any inputs would be valuable.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)\
**Post date:** [January 29, 2021, 8:06pm UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/2 "2021-01-29T20:06:23Z")

</div>

Hi @danie,

This is not supported out of the box. It may be possible to do this with a custom update module but I know we are considering how to handle this more fully moving forward. @eystein may have more info.

Drew

---

<div class="post-metadata">

**Author:** ![eystein](https://avatars.discourse-cdn.com/v4/letter/e/e5b9ba/32.png) [@eystein](https://hub.mender.io/u/eystein)\
**Post date:** [January 29, 2021, 9:36pm UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/3 "2021-01-29T21:36:37Z")

</div>

Indeed, we will add product support for this at some point!

Are you looking for symmetric / shared key encryption or something else?

---

<div class="post-metadata">

**Author:** ![danie](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/danie/32/620_2.png) [@danie](https://hub.mender.io/u/danie)\
**Post date:** [January 30, 2021, 4:37pm UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/4 "2021-01-30T16:37:00Z")

</div>

Thanks for the info.

Evan a reference to symmetric (AES) encryption would be a great starting point.

---

<div class="post-metadata">

**Author:** ![tacarrie](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/tacarrie/32/1791_2.png) [@tacarrie](https://hub.mender.io/u/tacarrie)\
**Post date:** [November 21, 2022, 10:36am UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/5 "2022-11-21T10:36:41Z")

</div>

Is there any news on this topic?  
We are interested in both, symmetric and asymmetric encryption of the artifacts.

---

<div class="post-metadata">

**Author:** ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\
**Post date:** [November 22, 2022, 10:23am UTC](https://hub.mender.io/t/how-to-encrypt-update-artifact/3136/6 "2022-11-22T10:23:56Z")

</div>

Hi @tacarrie,

Thanks for your interest. The situation at the moment is

- it should be perfectly possible to create and deploy encrypted artifact payloads
- there is no readymade solution for this, it would need to be a custom update module.  
One of the main concerns would be the key management. If you like to discuss your requirements in more detail, feel free to ping me directly and we can have a chat.

Greetz,  
Josef