---
title: Enabling key rolling
description: Resume key rolling.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_zero_downtime_upgrade:pa_enabling_key_rolling
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_zero_downtime_upgrade/pa_enabling_key_rolling.html
revdate: February 6, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Enabling key rolling

Resume key rolling.

## About this task

![Flowchart showing a deployment as key rolling is resumed.](_images/jqq1564006857998.png)

In the previous flowchart:

1. A user with a WebSession Cookie sends a request to the load balancer.

2. The load balancer directs the request to one of the three upgraded engine nodes. The engine nodes are all using the target version of PingAccess.

3. The administrative node is using the target version of PingAccess.

## Steps

1. Click **Access**, then go to **Identity Mappings > Auth Token Management**.

2. In the **Auth Token Management** section, select the **Key Roll Enabled** check box.

3. Verify that the **Key Roll Interval (H)** is correct, then click **Save**.

4. Click **Access**, then go to **Web Sessions > Web Session Management**.

5. In the **Web Session Management** section, select the **Key Roll Enabled** check box.

6. Verify that the **Key Roll Interval (H)** is correct, then click **Save**.

7. Click **Access**, then go to **Token Validation > OAuth Key Management**.

8. In the **OAuth Key Management** section, select the **Key Roll Enabled** check box.

9. Verify that the **Key Roll Interval (H)** is correct, then click **Save**.