For AI agents: a documentation index is available at https://www.mongodb.com/docs/llms.txt — markdown versions of all pages are available by appending .md to any URL path.
Docs Menu
Docs Home
/ /
Security
Docs Home
/
Management
/
Cloud Manager
/
Security
Docs Home
/
Management
/
Cloud Manager
/
Security

Rotate Master KMIP Keys

Most regulatory requirements mandate that a managed key used to decrypt sensitive data must be rotated out and replaced with a new key once a year. Cloud Manager provides the option to rotate the master KMIP key.

Important

Setting kmipKeyIdentifier in the deployment's advanced options disables the Rotate the KMIP Master Key option. To use this procedure, first clear kmipKeyIdentifier from the deployment's advanced options or rotate the key manually.

Procedure

1

In MongoDB Cloud Manager, go to the Processes page for your project.

  1. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it's not already displayed, select your desired project from the Projects menu in the navigation bar.

  3. In the sidebar, click Processes under the Database heading.

The Processes page displays.

2

Find the deployment for which you wish to rotate the key.

3

Rotate the KMIP Master key.

In the card for the deployment:

  1. Click

  2. Select Rotate the KMIP Master Key.

  3. Click Rotate Key.

4

Click Review & Deploy to review your changes.

Cloud Manager displays your proposed changes.

  1. If you are satisfied, click Confirm & Deploy.

  2. If you want to make further configuration changes, click Cancel. Click Modify for the cluster to make additional changes.

Back

Encrypt Snapshots

Next

Configure & Deploy Auditing