diff --git a/systemd.spec b/systemd.spec
index 81e8a266641b7bc7a00c3fc03462269aca426f63..a81c936688a59e18908adeec99af32b71d24de4f 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -21,7 +21,7 @@
 Name:           systemd
 Url:            https://www.freedesktop.org/wiki/Software/systemd
 Version:        249
-Release:        44
+Release:        45
 License:        MIT and LGPLv2+ and GPLv2+
 Summary:        System and Service Manager
 
@@ -473,6 +473,7 @@ BuildRequires:  iptables-devel, docbook-style-xsl, pkgconfig, libxslt, gperf
 BuildRequires:  gawk, tree, hostname, git, meson >= 0.43, gettext, dbus >= 1.9.18
 BuildRequires:  python3-devel, python3-lxml, firewalld-filesystem, libseccomp-devel
 BuildRequires:  python3-jinja2
+BuildRequires:  cryptsetup-devel
 
 %ifarch %{valgrind_arches}
 %ifnarch loongarch64
@@ -673,7 +674,7 @@ CONFIGURE_OPTS=(
         -Dgcrypt=true
         -Daudit=true
         -Delfutils=false
-        -Dlibcryptsetup=false
+        -Dlibcryptsetup=true
         -Dqrencode=false
         -Dgnutls=true
         -Dmicrohttpd=false
@@ -1269,6 +1270,7 @@ fi
 /usr/bin/systemd-tty-ask-password-agent
 /usr/bin/busctl
 /usr/bin/coredumpctl
+/usr/bin/systemd-cryptenroll
 %dir /usr/lib/environment.d
 %dir /usr/lib/binfmt.d
 %dir /usr/lib/tmpfiles.d
@@ -1507,6 +1509,8 @@ fi
 %{_systemddir}/system-generators/systemd-run-generator
 %{_systemddir}/system-generators/systemd-system-update-generator
 %{_systemddir}/system-generators/systemd-getty-generator
+%{_systemddir}/system-generators/systemd-cryptsetup-generator
+%{_systemddir}/system-generators/systemd-veritysetup-generator
 %{_systemddir}/user-environment-generators/30-systemd-environment-d-generator
 %{_systemddir}/system-preset/90-systemd.preset
 %{_userunitdir}/systemd-tmpfiles-setup.service
@@ -1538,6 +1542,19 @@ fi
 %{_systemddir}/catalog/systemd.zh_TW.catalog
 %{_systemddir}/catalog/systemd.ru.catalog
 %{_systemddir}/catalog/systemd.catalog
+%{_systemddir}/system/cryptsetup-pre.target
+%{_systemddir}/system/cryptsetup.target
+%{_systemddir}/system/initrd-root-device.target.wants/remote-cryptsetup.target
+%{_systemddir}/system/initrd-root-device.target.wants/remote-veritysetup.target
+%{_systemddir}/system/remote-cryptsetup.target
+%{_systemddir}/system/remote-veritysetup.target
+%{_systemddir}/system/sysinit.target.wants/cryptsetup.target
+%{_systemddir}/system/sysinit.target.wants/veritysetup.target
+%{_systemddir}/system/system-systemd\x2dcryptsetup.slice
+%{_systemddir}/system/veritysetup-pre.target
+%{_systemddir}/system/veritysetup.target
+%{_systemddir}/systemd-cryptsetup
+%{_systemddir}/systemd-veritysetup
 /usr/lib/sysctl.d/50-default.conf
 /usr/lib/sysctl.d/50-pid-max.conf
 /usr/lib/sysctl.d/50-coredump.conf
@@ -1874,6 +1891,9 @@ fi
 %{_libdir}/security/pam_systemd.so
 
 %changelog
+* Mon Jan 2 2023 yuelg<yuelg@chinaunicom.cn> - 249-45
+- Enable disk encryption when install operating system
+
 * Wed Dec 28 2022 huyubiao<huyubiao@huawei.com> - 249-44
 - fix CVE-2022-4415