NSO will not encrypt the string configured for the "key-string" leaf. The XR device will encrypt it.

Hi, Looking at the Cisco-IOS-XR-lib-keychain-cfg.yang model that seems to match the version you are using: container keys { description "Configure a Key"; list key { key "key-id"; description ...

I believe NSO will not do anything to the string you configured with the key-string leaf and will send it to the device as-is. container key-string { description "Configure a clear text/encrypted Key string "...

If the web server with the example guide is down, try: https://webcache.googleusercontent.com/search?q=cache:Y9Sxo72pk4IJ:https://www.codetd.com/en/article/10787113&cd=10&hl=sv&ct=clnk&gl=se