Docs Menu

Docs HomeMongoDB Ops Manager

Rotate Keyfile

On this page

  • Prerequisites
  • Procedure

If your cluster uses keyfile authentication, it is recommended that you rotate the keyfile periodically. Ops Manager provides an automated procedure for keyfile rotation with no downtime.

To rotate the keyfile using the API instead of the user interface, see Rotate a Key File with the API.

To perform a rolling keyfile rotation:

  • Authentication must be enabled.

  • At least one cluster in the project must be configured with the clusterAuthMode option set to keyFile or sendKeyFile.

  • All clusters in the project must be running MongoDB version 4.2 or higher.

1
  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it is not already displayed, select your desired project from the Projects menu in the navigation bar.

  3. If it is not already displayed, click Deployment in the sidebar.

  1. Click the Security tab.

  2. Click the Settings tab.

2
3
  1. Click Review & Deploy.

  2. The modal window contains a summary of the keyfile rotation procedure. If it all looks correct, click Confirm & Deploy.

←  Clear Security SettingsRotate Automation Password →