Managing Keys

Navigate to Security → Keys to inspect current envelope keys and service signing keys. Each entry shows its creation date, status, and next scheduled rotation.

Actions

• force rotate a key if it is suspected compromised
• download wrapped keys for escrow or HSM import
• disable unused signing keys to shrink attack surface

Key operations require MFA and, for restricted vaults, approval from two admins.