---
title: Rotating and revoking a PingID properties file
description: You can rotate or revoke a PingID properties file.
component: pingid
page_id: pingid:pingid_integrations:pid_rotating_and_revoking_a_properties_file
canonical_url: http://docs.pingidentity.com/pingid/pingid_integrations/pid_rotating_and_revoking_a_properties_file.html
revdate: January 28, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result:
  result-2: Result:
---

# Rotating and revoking a PingID properties file

You can rotate or revoke a PingID properties file.

## About this task

Revoking a properties file removes it from PingID, invalidating any devices that used it.

|   |                                                                                                                                                                                                                                                                                                |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Revoking a properties file should be done with extreme caution. Users signed on to machines with authentication based on a revoked properties file can continue to work normally. However, at their next sign on, they won't be able to authenticate and will be locked out of their machines. |

Rotating a properties file involves replacing a properties file with a new one. To minimize downtime to users:

## Steps

1. In the PingOne admin portal, go to **Setup → PingID → Client Integration**.

   The **Client Integration** page shows all PingID properties files associated with each type of properties file, such as PingFederate and unrestricted, Windows and Mac login, or SSH login properties files.

   ![Screen capture of the Client Integration tab showing an example of an existing properties file.](_images/lul1598188653192.png)

2. To ensure minimal downtime when rotating a PingID properties file (key rotation):

   1. To generate a new PingID properties file, click **[icon: plus, set=fa]Generate**.

   2. The **Download** button next to the name of the generated file is displayed as disabled. Click **Save** at the bottom of the page to enable the **Download** button.

   3. Click **Download**.

   4. Link it to the relevant client.

      The documentation for each client explains how it is linked, such as by running the GUI or CLI installer.

3. In the properties file list, select the file to be revoked (the old properties file from step 2, if relevant) and click **Revoke**.

   ### Result:

   A confirmation window is displayed.

   ![Screen capture of the Revoke File confirmation window, warning that if you continue and revoke the properties file, any client using the properties file will lose their access. It shows the Revoke button to confirm or the Cancel button to cancel the action.](_images/dzw1598189186866.png)

4. Click **Revoke**, and then click **Save**.

   ### Result:

   The selected file is removed from the PingID server and can no longer be used for authentication.