MFA Guides

Key Rollover Tool

Key Rollover allows the process to change the RapidIdentity Server cryptographic keys.

This process is provided to address evidence or suspicion that the server keys are compromised or to adhere to more stringent compliance requirements that may expect cryptographic components to change on a routine basis.

The utility to perform Key Rollover is located within the Tools folder of your RapidIdentity Server installation directory: C:\Program Files\2FA\One Server\Tools\KeyRollover.

Extreme care must be taken before performing the key rollover process.

Failure to complete all required steps could result in a catastrophic, unrecoverable failure the deployed RapidIdentity Server infrastructure.

It is advisable to backup the original server keys as described in the previous section before attempting any Key Rollover process.