CLEVIS-ENCRYPT-FIL(1)

💖 CLEVIS-ENCRYPT-FIL(1) 💖

okay bestie, welcome to the manual page for clevis-encrypt-file — yes the header says CLEVIS-ENCRYPT-FIL(1) bc the terminal is a hater and clipped it, don't worry about it, she's still iconic ✨

---

🌸 NAME 🌸

clevis-encrypt-file — Encrypts using a file policy 🔐✨

---

🎀 SYNOPSIS 🎀

clevis encrypt file CONFIG < PT > JWE

---

🦋 OVERVIEW 🦋

so the clevis encrypt file command encrypts using a file policy, periodt. its only argument is the JSON configuration object — that's it, that's the whole job, and she does it flawlessly 💅

encrypting data using the file pin works like this:

$ clevis encrypt file '{"name":"/path/to/file"}' < PT > JWE

The given file must not exist yet. like... it has to be brand new, no cap. if it's already there, that's not it 🙈

to decrypt the data, just pass it to the clevis decrypt command:

$ clevis decrypt < JWE > PT

and boom, you're back. the way that just works 😭🫶

---

⭐ CONFIG ⭐

this command uses the following configuration properties:

• name (string) : The name to the file where the jwk is stored (REQUIRED) 🔥

<!-- -->

like, genuinely REQUIRED. not "required if you feel like it". she will not run without her name, bestie 💀

---

💀 BUGS 💀

• Requires that directories for that file already exist. so if the folder path isn't there yet, that's a you problem, the command is not your mom 🌈
• Rather for educational purposes. 📚✨

---

👑 SEE ALSO 👑

• clevis-decrypt(1)

---

and that's the whole page bestie!! go forth and encrypt, you absolute main character 🧚💜

this lil masterpiece dropped on 10/16/2026, brought to you by the CLEVIS-ENCRYPT-FIL(1) girlies ✨🎀 bye bye!! 🫶