scopes rotate-keys

Command: boundary scopes rotate-keys

The boundary scopes rotate-keys command lets you replace a scope's current KEK and DEKs with a new set of keys.

Example

This example rotates all keys within the scope s_1234567890:

$ boundary scopes rotate-keys -scope-id s_1234567890

Usage

$ boundary scopes rotate-keys [args]

Command options

• -rewrap - If set, re-encrypts DEKs with the new KEK. The default value is false.
• -scope-id=<string> - The enclosing scope in which you want to rotate the keys.