Key Rotation

SSH key pairs do not expire automatically. Rotate a key when your organization's security policy requires it, or if you suspect that the key has been compromised.

  1. Generate a new key pair by following the steps in Generate an SSH Key Pair. Use a new private key file name.
  2. Install the new public key on the audit log export receiver host.
  3. In Administration, Audit Log Export, edit the receiver configuration and specify the new Private Key Name. If the new key has a passphrase, specify it in Passphrase.
  4. Verify that an audit log export completes successfully by using Synchronize or waiting for the next scheduled export.
  5. After you verify the export, remove the old public key from the target user's ~/.ssh/authorized_keys file on the receiver host.