<div dir="ltr"><div>Thank you very much for the link!</div><div><br></div><div>Best regards,</div><div>Alexandr</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 20, 2017 at 11:01 PM, Boris Bobrov <span dir="ltr"><<a href="mailto:bbobrov@mirantis.com" target="_blank">bbobrov@mirantis.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Yes, you need to setup them and rotate if necessary:<br>
<a href="http://docs.openstack.org/developer/keystone/configuration.html?highlight=credential_migrate#credential-encryption" rel="noreferrer" target="_blank">http://docs.openstack.org/<wbr>developer/keystone/<wbr>configuration.html?highlight=<wbr>credential_migrate#credential-<wbr>encryption</a><br>
<div><div class="h5"><br>
On 01/20/2017 07:49 PM, Alexandr Porunov wrote:<br>
> Hello,<br>
><br>
> I found not only fernet_keys but also credential-keys in /etc/keystone/<br>
><br>
> What is it? Do we need to rotate them?<br>
><br>
> Sincerely,<br>
> Alexandr<br>
><br>
><br>
</div></div>> ______________________________<wbr>_________________<br>
> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
> Post to     : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
> Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
><br>
<br>
______________________________<wbr>_________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
Post to     : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
</blockquote></div><br></div>