Message Level Encryption Key Rotation

Usage and Config Platform
1

Hi Everyone,

I have a question about MLE key rotation. How long is the old key good for? I want to distribute the installer with the key far and wide but want to enforce MLE from first check in but don’t want to have to distribute a new installer every time i rotate my keys? I was wondering if the old keys would continue to work for first check in for the clients to grab the new keys.

Peter

2

If you rotate your keys and the installer is wrong it will quickly be updated by the client gathering the actionsite and getting a new masthead. The keys being wrong merely prevents the client from being able to report, not gather.

1 Like
3

Thanks for your reply Alan that is exactly what I wanted to hear.