// Module included in the following assemblies:
//
// * installing/installing_ibm_z/installing-ibm-z-kvm.adoc
// * installing/installing_ibm_z/installing-restricted-networks-ibm-z-kvm.adoc

:_mod-docs-content-type: PROCEDURE
[id="configuring-encryption-kvm-ibm-z-linuxone-environment_{context}"]
= Configuring encryption for nodes in an {ibm-z-title} or {ibm-linuxone-title} environment

You can choose between three methods to optionally secure your {product-title} control plane and compute nodes on {ibm-z-name} or {ibm-linuxone-name}:

* {ibm-name} Secure Execution
* Linux Unified Key Setup (LUKS) encryption via {ibm-name} Crypto Express (CEX)
* Network Bound Disk Encryption (NBDE)