How to rotate a key
Rotate a key by copying existing capabilities and issued certifications to a new key using sq key rotate
:
$ sq key rotate --cert $FINGERPRINT
Replaying certifications
To only recreate the certifications made by the old key without generating a new key, use sq pki vouch replay
:
$ sq pki vouch replay --source $SOURCE_FPR --target $TARGET_FPR
Read more about rotating keys.