---
title: Disabling key rolling
description: Disable key rolling to prevent active sessions from being invalidated during the upgrade process. This is a temporary modification, and you will reenable key rolling at the end of the upgrade process.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_zero_downtime_upgrade:pa_disabling_key_rolling
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_zero_downtime_upgrade/pa_disabling_key_rolling.html
revdate: February 6, 2023
section_ids:
  next-steps: Next steps
---

# Disabling key rolling

Disable key rolling to prevent active sessions from being invalidated during the upgrade process. This is a temporary modification, and you will reenable key rolling at the end of the upgrade process.

There are different procedures at this stage depending on the source version of PingAccess. The following flowchart gives an example.

![Flowchart showing a deployment as key rolling is disabled.](_images/pix1564006855117.png)

In this flowchart:

1. A user with a WebSession Cookie sends a request to the load balancer.

2. The load balancer directs the request to one of three engine nodes, which are all still using the source version of PingAccess.

3. At the Admin node, key rolling has been paused.

## Next steps

* [Disabling key rolling in PingAccess 6.0 or later](pa_disabling_key_rolling_in_pa_60_or_later.html)

* [Disabling key rolling in PingAccess 5.2 or 5.3](pa_disabling_key_rolling_in_pa_52_or_53.html)

* [Disabling key rolling in PingAccess 5.0 or 5.1](pa_disabling_key_rolling_in_pa_50_or_51.html)

* [Disabling key rolling in PingAccess 4.3 or earlier](pa_disabling_key_rolling_in_pa_43_or_earlier.html)

Next, you will [upgrade the Admin node](pa_upgrading_the_admin_node.html).