Dan HeathandRobin Beck
b442c1fa60
* docs: Update meta content - CLI * docs: Edits for consistency * docs: More edits for consistency * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Apply batch suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Remove given id references * Update read.mdx * Update read.mdx --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
38 lines
891 B
Plaintext
38 lines
891 B
Plaintext
---
|
|
layout: docs
|
|
page_title: scopes rotate-keys - Command
|
|
description: >-
|
|
The "scopes rotate-keys" command deactivates a scope's current KEK and DEKs, and then activates a new set of keys for the scope resource.
|
|
---
|
|
|
|
# scopes rotate-keys
|
|
|
|
Command: `boundary scopes rotate-keys`
|
|
|
|
The `boundary scopes rotate-keys` command lets you replace a scope's current KEK and DEKs with a new set of keys.
|
|
|
|
## Example
|
|
|
|
This example rotates all keys within the scope `s_1234567890`:
|
|
|
|
```shell-session
|
|
$ boundary scopes rotate-keys -scope-id s_1234567890
|
|
```
|
|
|
|
## Usage
|
|
|
|
<CodeBlockConfig hideClipboard>
|
|
|
|
```shell-session
|
|
$ boundary scopes rotate-keys [args]
|
|
```
|
|
|
|
</CodeBlockConfig>
|
|
|
|
### Command options
|
|
|
|
- `-rewrap` - If set, re-encrypts DEKs with the new KEK.
|
|
The default value is `false`.
|
|
- `-scope-id=<string>` - The enclosing scope in which you want to rotate the keys.
|
|
|
|
@include 'cmd-option-note.mdx' |