Key Rotation in Vault under OCI

Key Rotation in OCI Vault means periodically replacing encryption keys with new versions to improve security while still allowing access to previously encrypted data.

Rotate Key = Change Lock Password Regularly for Better Security

Requirement: If an old key is:Stolen,Exposed,Compromised then attackers may access encrypted data.

Benifits

• Improves security
• Supports compliance standards
• Can be automatic or manual
• New data uses new key version
• Old encrypted data remains accessible
• Rotating keys reduces this risk.

How OCI Vault Rotation Works

---

Step by step process to Rotate key in OCI

Note: Key rotation should be in the same Key vault else will lose the data.