1--- 2layout: "docs" 3page_title: "operator rotate - Command" 4sidebar_title: "<code>rotate</code>" 5sidebar_current: "docs-commands-operator-rotate" 6description: |- 7 The "operator rotate" rotates the underlying encryption key which is used to 8 secure data written to the storage backend. This installs a new key in the key 9 ring. This new key is used to encrypt new data, while older keys in the ring 10 are used to decrypt older data. 11--- 12 13# operator rotate 14 15The `operator rotate` rotates the underlying encryption key which is used to 16secure data written to the storage backend. This installs a new key in the key 17ring. This new key is used to encrypted new data, while older keys in the ring 18are used to decrypt older data. 19 20This is an online operation and does not cause downtime. This command is run 21per-cluster (not per-server), since Vault servers in HA mode share the same 22storage backend. 23 24## Examples 25 26Rotate Vault's encryption key: 27 28```text 29$ vault operator rotate 30Key Term 3 31Install Time 01 May 17 10:30 UTC 32``` 33 34## Usage 35 36The following flags are available in addition to the [standard set of 37flags](/docs/commands/index.html) included on all commands. 38 39### Output Options 40 41- `-format` `(string: "table")` - Print the output in the given format. Valid 42 formats are "table", "json", or "yaml". This can also be specified via the 43 `VAULT_FORMAT` environment variable. 44