Policy Server Guides › Policy Server Administration Guide › Configuring and Managing Encryption Keys › Manage Agent Keys › Configure Periodic Key Rollover

Configure Periodic Key Rollover

The Policy Server supports periodic Agent key rollovers weekly, daily, or at fixed intervals in a single day. The shortest allowable period between rollovers is one hour.

Note: If your operating system is not configured to adjust the system time for daylight savings time, key rollover may be offset by one hour. To ensure that key rollover occurs at the expected time, configure your operating system to recognize daylight savings time.

To configure periodic key rollover

1. In the Policy Server Management Console, select Enable Agent Key Generation check box in the Keys tab and click OK.
2. Log into the Administrative UI.
3. From the Administration tab, select Policy Server, Key Management.

   The Key Management pane opens.

4. In the Agent Key group box, select Use dynamic Agent Key.

   The pane changes to support dynamic keys.

5. In the Dynamic Key Detail group box, select Automatic key rollover then click Set rollover frequency.

   The Dynamic Key Rollover group box appears.

6. Set the frequency of the automatic key rollover.
7. Click OK.

   You return to the Key Management pane.