1---
2layout: "docs"
3page_title: "operator rotate - Command"
4sidebar_title: "<code>rotate</code>"
5sidebar_current: "docs-commands-operator-rotate"
6description: |-
7  The "operator rotate" rotates the underlying encryption key which is used to
8  secure data written to the storage backend. This installs a new key in the key
9  ring. This new key is used to encrypt new data, while older keys in the ring
10  are used to decrypt older data.
11---
12
13# operator rotate
14
15The `operator rotate` rotates the underlying encryption key which is used to
16secure data written to the storage backend. This installs a new key in the key
17ring. This new key is used to encrypted new data, while older keys in the ring
18are used to decrypt older data.
19
20This is an online operation and does not cause downtime. This command is run
21per-cluster (not per-server), since Vault servers in HA mode share the same
22storage backend.
23
24## Examples
25
26Rotate Vault's encryption key:
27
28```text
29$ vault operator rotate
30Key Term        3
31Install Time    01 May 17 10:30 UTC
32```
33
34## Usage
35
36The following flags are available in addition to the [standard set of
37flags](/docs/commands/index.html) included on all commands.
38
39### Output Options
40
41- `-format` `(string: "table")` - Print the output in the given format. Valid
42  formats are "table", "json", or "yaml". This can also be specified via the
43  `VAULT_FORMAT` environment variable.
44