• Security >
• Enable Authentication for an Ops Manager Project >
• Rotate Keyfile

Rotate Keyfile

If your cluster uses keyfile authentication, it is recommended that you rotate the keyfile periodically. Ops Manager provides an automated procedure for keyfile rotation with no downtime.

To rotate the keyfile using the API instead of the user interface, see Rotate a Key File with the API.

Prerequisites

To perform a rolling keyfile rotation:

• Authentication must be enabled.
• At least one cluster in the project must be configured with the clusterAuthMode option set to keyFile or sendKeyFile.
• All clusters in the project must be running MongoDB version 4.2 or higher.

Procedure

1

Navigate to the Authentication & SSL tab.

1. If it is not already displayed, select the organization that contains your desired project from the office icon Organizations menu in the navigation bar.
2. If it is not already displayed, select your desired project from the Projects menu in the navigation bar.
3. If it is not already displayed, click Deployment in the sidebar.
4. Click the Security tab.
5. Click the Authentication & SSL tab.

2

Click Rotate Keyfile.

The Rotate Keyfile button is in the Auth Mechanisms section.

3

Review your changes.

1. Click Review & Deploy.
2. The modal window contains a summary of the keyfile rotation procedure. If it all looks correct, click Confirm & Deploy.

←   Clear Security Settings Rotate Automation Password  →

© MongoDB, Inc 2008-present. MongoDB, Mongo, and the leaf logo are registered trademarks of MongoDB, Inc.