How to rotate a key

Rotate a key by copying existing capabilities and issued certifications to a new key using sq key rotate:

$ sq key rotate --cert $FINGERPRINT

Replaying certifications

To only recreate the certifications made by the old key without generating a new key, use sq pki vouch replay:

$ sq pki vouch replay --source $SOURCE_FPR --target $TARGET_FPR

Read more about rotating keys.