If you use a kickstart file during installation,
anaconda can add a randomly generated backup passphrase to each block device on the system and save each passphrase to an encrypted file on the local file system. Specify the URL of this certificate with the
--escrowcert parameter as described in
Section C.3.2, “Saving Passphrases”, followed by the
--backuppassphrase parameter for each of the kickstart commands that relate to the devices for which you want to create backup passphrases.
