How to Set an Authorization Server to Manually Rotate Keys
Oct 13, 2023
Okta Classic Engine
API Access Management
Overview
This article describes how to set an authorization server to manually rotate keys.
Applies To
- API Access Management
Solution
Important: Automatic key rotation is more secure than manual key rotation and is enabled by default. Manual key rotation should be used only when automatic key rotation is not feasible.
- Log into the Okta org.
- From the Admin dashboard, go to Security > API.
- Open an authorization server for editing.
- Change the value of Signing Key Rotation to Manual and save.
- In the authorization server Settings tab, click the Rotate Signing Keys button to rotate the keys manually. This button doesn’t display when the Signing Key Rotation is set to Automatic.
More details about Key Rotation found here.
