Questions tagged [key-rotation]

18 questions
6
votes
3 answers

Where is Google pay Developer account and how to generate public key to upload in it?

No One on Whole of Stack overflow no one has answer to this, I dont know why , has no one worked with Google pay on android?? . According to google : Follow this link…
YogiAR
  • 2,207
  • 23
  • 44
2
votes
1 answer

After a key rotation do I still need the old key to sign the update of the app?

I have read here, https://source.android.com/docs/security/features/apksigning/v3, and here https://www.xda-developers.com/apk-signature-scheme-v3-key-rotation/, that I rotate keys with the V3 signing and be able to sign the apk with another key. Do…
2
votes
1 answer

Managing key rotations with GCP_KMS with BYOK solution

We have RSA key pairs generated on on-prem and plan to sync them to GCP-KMS. There is an yearly key rotation policy which would be done on on-prem and new key_versions would be synced to KMS. My concern is with the KMS API. Problem: The API always…
1
vote
0 answers

How to test updated signing key from Play Store

We recently updated our app signing key from the Play Store. We opted for a Google managed key, and to use it just for new installs (on Android 13 and above). What I see is that the apk for an Android 13 has both keys within its lineage and the…
1
vote
1 answer

If I rotate my secret key, should my public key change as well?

In the asymmetric encryption, public key and secret key are paired. If I rotate my secret key, does this mean I also generate a new public key. I ask this question because in crypto world, account address is generated using public key, or public…
1
vote
0 answers

Hashicorp vault key rotation using dates

I am developing a backend service which exposes APIs. I have decided to use vault to store the tokens to access these APIs. Right now I am storing and rotating the keys manually in vault. This is my sample code to read secrets from vault. func (v…
Daffodil
  • 69
  • 6
1
vote
1 answer

How to rotate an Azure storage account access key from C# code?

I have an Azure storage account. It has a number of access keys associated. From the Azure web GUI it is possible to "rotate" these keys. It is also possible to rotate them from the command line, using (I believe) az storage account keys renew. I…
Claus Appel
  • 1,015
  • 10
  • 28
1
vote
0 answers

Can we automate the rotation of the keys of multiple service accounts using one service account key rotator in GCP?

The rotation of keys periodically is Google's recommended practice. As we know, we need a rotation key to automate the service account key. So is it possible to rotate the keys of multiple service accounts in single project using a single rotator…
1
vote
0 answers

What happens to the CMK Key1 when rotated/expired/deleted and if we use CMK Alias for that CMK Key1: cross-account or even same account references?

What happens to the assets or objects that are encrypted with a "CMK Key1": when that key is rotated/expired/deleted and when we attach a "CMK ALIAS-xyz" on that "CMK Key1" (cross-account or even same account references) Can the new "CMK Key2"…
1
vote
1 answer

AWS Access Key Rotation

I am planning to rotate AWS keys. My question is, will program throws an exception if we use expried AWS Keys?. If yes, what is the exception it is going to throw. I didnt find any api to check the expired AWS Key. Can someone pls help.
Swathi
  • 151
  • 17
0
votes
1 answer

Clarification on key rotation in gcp

I have to implement a policy of rotation for our KEK used in GCP and i have doubts about the management of old keys. We have implemented an external key management service in BYOK/EKM mode and KEKs are used for GCE, GCS, GKE, and Sql services. Our…
0
votes
0 answers

Verify client authenticity runs by privileged user, from server side

I'm working on a network product that has proprietary protocol connecting to remote server. The server grant permissions to the agent if the machine comply with some security standards (i.e. whether it has disk encryption activated, anti-virus…
Irad K
  • 867
  • 6
  • 20
0
votes
1 answer

Send trigger when a key in KMS is rotated

In the project I am working on, the key in the KMS would automatically rotate every 90 days, but at times may also be manually rotated in certain scenarios. I'm looking for a way to give a trigger to a microservice every time a rotation happens, be…
0
votes
0 answers

can we update the power BI GW credentials from AWS secret manager via lambda function?

I have below use case: Power BI running on azure which load data from RDS The credentials to access RDS are configured at Power BI gateway dashboard(azure) Now currently to change/rotate the password of RDS, we manually changing the password at…
0
votes
1 answer

AWS Key Rotation Issues

I am trying to follow the guide here to automate the rotation of keys for IAM users- https://awsfeed.com/whats-new/apn/automating-rotation-of-iam-user-access-and-secret-keys-with-aws-secrets-manager Essentially I'm wanting to get new keys every 60…
1
2