diff --git a/README.md b/README.md
index 11da832..b5e4715 100644
--- a/README.md
+++ b/README.md
@@ -59,6 +59,10 @@ easyrsa --batch build-server-full server nopass
 ```
 cp pki/ca.crt pki/issued/server.crt pki/private/server.key /usr/local/etc/openvpn/
 ```
+И создадим tls-ключ для шифрования хендшейка:
+```
+openvpn --genkey secret /usr/local/etc/openvpn/tls-crypt.key
+```
 ## Настройка сервера
 Создаём конфиг сервера:
 ```
@@ -78,6 +82,7 @@ data-ciphers AES-128-GCM
 ca /usr/local/etc/openvpn/ca.crt
 cert /usr/local/etc/openvpn/server.crt
 key /usr/local/etc/openvpn/server.key
+tls-crypt /usr/local/etc/openvpn/tls-crypt.key
 dh none
 keepalive 10 120
 explicit-exit-notify 1