Docs Menu
Docs Home
/
MongoDB Ops Manager
/
Security
/
Secure MongoDB Deployments with Authentication

Rotate Keyfile

On this page

  • Prerequisites
  • Procedure

If your cluster uses keyfile authentication, it is recommended that you rotate the keyfile periodically. Ops Manager provides an automated procedure for keyfile rotation with no downtime.

To rotate the keyfile using the API instead of the user interface, see Rotate a Key File with the API.

Prerequisites

To perform a rolling keyfile rotation:

  • Authentication must be enabled.

  • At least one cluster in the project must be configured with the clusterAuthMode option set to keyFile or sendKeyFile.

  • All clusters in the project must be running MongoDB version 4.2 or higher.

Procedure

1

Navigate to the Settings tab.

  1. If it is not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it is not already displayed, select your desired project from the Projects menu in the navigation bar.

  3. If it is not already displayed, click Deployment in the sidebar.

  1. Click the Security tab.

  2. Click the Settings tab.

2

Click Rotate Keyfile.

3

Review your changes.

  1. Click Review & Deploy.

  2. The modal window contains a summary of the keyfile rotation procedure. If it all looks correct, click Confirm & Deploy.

Back

Clear Security Settings

Next

Rotate Automation Password