encryption generation is now mandatory