Questions tagged [key-rotation]
18 questions
6
votes
3 answers
Where is Google pay Developer account and how to generate public key to upload in it?
No One on Whole of Stack overflow no one has answer to this, I dont know why , has no one worked with Google pay on android?? . According to google :
Follow this link…

YogiAR
- 2,207
- 23
- 44
2
votes
1 answer
After a key rotation do I still need the old key to sign the update of the app?
I have read here, https://source.android.com/docs/security/features/apksigning/v3, and here https://www.xda-developers.com/apk-signature-scheme-v3-key-rotation/, that I rotate keys with the V3 signing and be able to sign the apk with another key.
Do…

Cosmin Constantin Firta
- 165
- 1
- 7
2
votes
1 answer
Managing key rotations with GCP_KMS with BYOK solution
We have RSA key pairs generated on on-prem and plan to sync them to GCP-KMS. There is an yearly key rotation policy which would be done on on-prem and new key_versions would be synced to KMS. My concern is with the KMS API.
Problem: The API always…

Abhinav Mishra
- 57
- 6
1
vote
0 answers
How to test updated signing key from Play Store
We recently updated our app signing key from the Play Store. We opted for a Google managed key, and to use it just for new installs (on Android 13 and above).
What I see is that the apk for an Android 13 has both keys within its lineage and the…

Carlo Codega
- 93
- 4
1
vote
1 answer
If I rotate my secret key, should my public key change as well?
In the asymmetric encryption, public key and secret key are paired. If I rotate my secret key, does this mean I also generate a new public key.
I ask this question because in crypto world, account address is generated using public key, or public…

Hanjie Deng
- 11
- 1
1
vote
0 answers
Hashicorp vault key rotation using dates
I am developing a backend service which exposes APIs. I have decided to use vault to store the tokens to access these APIs.
Right now I am storing and rotating the keys manually in vault. This is my sample code to read secrets from vault.
func (v…

Daffodil
- 69
- 6
1
vote
1 answer
How to rotate an Azure storage account access key from C# code?
I have an Azure storage account. It has a number of access keys associated. From the Azure web GUI it is possible to "rotate" these keys.
It is also possible to rotate them from the command line, using (I believe) az storage account keys renew.
I…

Claus Appel
- 1,015
- 10
- 28
1
vote
0 answers
Can we automate the rotation of the keys of multiple service accounts using one service account key rotator in GCP?
The rotation of keys periodically is Google's recommended practice. As we know, we need a rotation key to automate the service account key. So is it possible to rotate the keys of multiple service accounts in single project using a single rotator…

Aniket Ghole
- 192
- 1
- 11
1
vote
0 answers
What happens to the CMK Key1 when rotated/expired/deleted and if we use CMK Alias for that CMK Key1: cross-account or even same account references?
What happens to the assets or objects that are encrypted with a "CMK Key1":
when that key is rotated/expired/deleted and
when we attach a "CMK ALIAS-xyz" on that "CMK Key1" (cross-account or even same account references)
Can the new "CMK Key2"…

Sri N
- 11
- 3
1
vote
1 answer
AWS Access Key Rotation
I am planning to rotate AWS keys.
My question is, will program throws an exception if we use expried AWS Keys?. If yes, what is the exception it is going to throw.
I didnt find any api to check the expired AWS Key.
Can someone pls help.

Swathi
- 151
- 17
0
votes
1 answer
Clarification on key rotation in gcp
I have to implement a policy of rotation for our KEK used in GCP and i have doubts about the management of old keys.
We have implemented an external key management service in BYOK/EKM mode and KEKs are used for GCE, GCS, GKE, and Sql services. Our…

MaXbeMan
- 21
- 1
- 4
0
votes
0 answers
Verify client authenticity runs by privileged user, from server side
I'm working on a network product that has proprietary protocol connecting to remote server. The server grant permissions to the agent if the machine comply with some security standards (i.e. whether it has disk encryption activated, anti-virus…

Irad K
- 867
- 6
- 20
0
votes
1 answer
Send trigger when a key in KMS is rotated
In the project I am working on, the key in the KMS would automatically rotate every 90 days, but at times may also be manually rotated in certain scenarios.
I'm looking for a way to give a trigger to a microservice every time a rotation happens, be…

BefuddledBarberian
- 41
- 5
0
votes
0 answers
can we update the power BI GW credentials from AWS secret manager via lambda function?
I have below use case:
Power BI running on azure which load data from RDS
The credentials to access RDS are configured at Power BI gateway dashboard(azure)
Now currently to change/rotate the password of RDS, we manually changing the password at…

AdhiHari
- 5
- 2
0
votes
1 answer
AWS Key Rotation Issues
I am trying to follow the guide here to automate the rotation of keys for IAM users- https://awsfeed.com/whats-new/apn/automating-rotation-of-iam-user-access-and-secret-keys-with-aws-secrets-manager
Essentially I'm wanting to get new keys every 60…

RunRabbit
- 61
- 7