diff --git a/systemd.spec b/systemd.spec
index adc21bc9337aba56be4098dcdcc5c83602f391c2..169d9c4035551caa3a636f6bcb1a7647072f3fd3 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -21,7 +21,7 @@
 Name:           systemd
 Url:            https://www.freedesktop.org/wiki/Software/systemd
 Version:        249
-Release:        42
+Release:        43
 License:        MIT and LGPLv2+ and GPLv2+
 Summary:        System and Service Manager
 
@@ -462,6 +462,7 @@ BuildRequires:  iptables-devel, docbook-style-xsl, pkgconfig, libxslt, gperf
 BuildRequires:  gawk, tree, hostname, git, meson >= 0.43, gettext, dbus >= 1.9.18
 BuildRequires:  python3-devel, python3-lxml, firewalld-filesystem, libseccomp-devel
 BuildRequires:  python3-jinja2
+BuildRequires:  cryptsetup-devel
 
 %ifarch %{valgrind_arches}
 %ifnarch loongarch64
@@ -662,7 +663,7 @@ CONFIGURE_OPTS=(
         -Dgcrypt=true
         -Daudit=true
         -Delfutils=false
-        -Dlibcryptsetup=false
+        -Dlibcryptsetup=true
         -Dqrencode=false
         -Dgnutls=true
         -Dmicrohttpd=false
@@ -1258,6 +1259,7 @@ fi
 /usr/bin/systemd-tty-ask-password-agent
 /usr/bin/busctl
 /usr/bin/coredumpctl
+/usr/bin/systemd-cryptenroll
 %dir /usr/lib/environment.d
 %dir /usr/lib/binfmt.d
 %dir /usr/lib/tmpfiles.d
@@ -1496,6 +1498,8 @@ fi
 %{_systemddir}/system-generators/systemd-run-generator
 %{_systemddir}/system-generators/systemd-system-update-generator
 %{_systemddir}/system-generators/systemd-getty-generator
+%{_systemddir}/system-generators/systemd-cryptsetup-generator
+%{_systemddir}/system-generators/systemd-veritysetup-generator
 %{_systemddir}/user-environment-generators/30-systemd-environment-d-generator
 %{_systemddir}/system-preset/90-systemd.preset
 %{_userunitdir}/systemd-tmpfiles-setup.service
@@ -1527,6 +1531,19 @@ fi
 %{_systemddir}/catalog/systemd.zh_TW.catalog
 %{_systemddir}/catalog/systemd.ru.catalog
 %{_systemddir}/catalog/systemd.catalog
+%{_systemddir}/system/cryptsetup-pre.target
+%{_systemddir}/system/cryptsetup.target
+%{_systemddir}/system/initrd-root-device.target.wants/remote-cryptsetup.target
+%{_systemddir}/system/initrd-root-device.target.wants/remote-veritysetup.target
+%{_systemddir}/system/remote-cryptsetup.target
+%{_systemddir}/system/remote-veritysetup.target
+%{_systemddir}/system/sysinit.target.wants/cryptsetup.target
+%{_systemddir}/system/sysinit.target.wants/veritysetup.target
+%{_systemddir}/system/system-systemd\x2dcryptsetup.slice
+%{_systemddir}/system/veritysetup-pre.target
+%{_systemddir}/system/veritysetup.target
+%{_systemddir}/systemd-cryptsetup
+%{_systemddir}/systemd-veritysetup
 /usr/lib/sysctl.d/50-default.conf
 /usr/lib/sysctl.d/50-pid-max.conf
 /usr/lib/sysctl.d/50-coredump.conf
@@ -1863,6 +1880,9 @@ fi
 %{_libdir}/security/pam_systemd.so
 
 %changelog
+* Mon Jan 2 2023 yuelg<yuelg@chinaunicom.cn> - 249-43
+- Enable disk encryption when install operating system
+
 * Wed Nov 23 2022 yangmingtai <yangmingtai@huawei.com> -249-42
 - 1.change /etc/systemd/journald.conf ForwardToWall to no
   2.change DefaultLimitMEMLOCK to 64M