Administrate Consul Keys¶
Replace the Pre-Installed Consul Key¶
-
Switch to the directory of the Consul program files:
/opt/seal/infrastrcuture/seal-consul-agent
-
Create a new symmetric key:
./consul.exe keygen
The new key is displayed.
-
Distribute the new key in the Consul cluster:
./consul.exe keyring -install <new_key>
-
Activate the new key:
./consul.exe keyring -use <new_key>
-
Delete the old key:
./consul.exe keyring -remove <old_key>
Show the Installed Keys¶
This is how you display all keys known to the Consul cluster:
./consul.exe keyring -list
Hint - key
The active key is highlighted.
GfTiHCQsAMdYyUKN+BYhMw==
is the default key set during the installation.