luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/website/source/docs/commands/operator/rotate.html.md
Seth Vargo c2f31c503a
Add "operator rotate" command documentation
2017-10-24 09:30:50 -04:00

1.1 KiB
Raw Blame History

layout page_title sidebar_current description
docs operator rotate - Command docs-commands-operator-rotate The "operator rotate" rotates the underlying encryption key which is used to secure data written to the storage backend. This installs a new key in the key ring. This new key is used to encrypted new data, while older keys in the ring are used to decrypt older data.

operator rotate

The operator rotate rotates the underlying encryption key which is used to secure data written to the storage backend. This installs a new key in the key ring. This new key is used to encrypted new data, while older keys in the ring are used to decrypt older data.

This is an online operation and does not cause downtime. This command is run per-cluster (not per-server), since Vault servers in HA mode share the same storage backend.

Examples

Rotate Vault's encryption key:

$ vault operator rotate
Key Term        3
Install Time    01 May 17 10:30 UTC

Usage

There are no flags beyond the standard set of flags included on all commands.