strazactl signing-keys

List, rotate and retire signing keys

On this page

strazactl signing-keys [flags]

Options inherited from parent commands

      --server string   strazad base URL (overrides $STRAZA_SERVER and the server you logged into)

See also

• strazactl: Straza admin CLI
• strazactl signing-keys list: List every signing key with its purpose and status
• strazactl signing-keys retire: Retire one client assertion key at once, for a key that may have been copied
• strazactl signing-keys rotate: Stage a new key of one purpose; the server promotes it once every replica holds it