Dumping to an encrypted device currently comes with some challenges. For example it requires manual intervention to type in the device's password. Furthermore, the memory hard key derivation functions require a lot of memory that needs to be reserved for the kdump kernel and thus is missing in production. Remedy this by passing the derived key from the production to the kdump kernel.

Currently this feature has been requested by IBM, RHCOS team, confidential virtual machine (CVM) team