Encryption Key Rotation

RKE1 Encryption Key Rotation

Enable encryption key rotation with either of the following two options:
- Select the Enabled radio button in the Rancher UI under Cluster Options Advanced Options Secrets Encryption:
- OR, apply the following YAML:
```
 rancher_kubernetes_engine_config:
   services:
     kube_api:
       secrets_encryption_config:
         enabled: true
```
Rotate keys in the Rancher UI:

2.1. Click ☰ > Cluster Management.

2.2. Select ⋮ > Rotate Encryption Keys on the far right of the screen next to your chosen cluster:

*New in v2.6.7*

Encryption key rotation is enabled by default and cannot be disabled.

To rotate keys in the Rancher UI:

Click ☰ > Cluster Management.
Select ⋮ > Rotate Encryption Keys on the far right of the screen next to your chosen cluster:

For more information on RKE2 secrets encryption config, please see the RKE2 docs.