---
title: Rotating system keys
description: On the System Keys window, you can manually rotate your PingFederate system keys to optimize your environment's security.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_systemkeystasklet_systemkeysstate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_systemkeystasklet_systemkeysstate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result
---

# Rotating system keys

On the **System Keys** window, you can manually rotate your PingFederate system keys to optimize your environment's security.

## About this task

System keys are used in cryptographic operations to generate and consume internal tokens. These tokens are leveraged in multiple use cases such as one-time links for self-service password reset and email ownership verification. Periodic rotation ensures optimal security of your environment.

## Steps

1. Go to **Security > Certificate & Key Management > System Keys**.

2. To rotate the system keys, click **Rotate**.

3. Click **Save**.

## Result

PingFederate generates a new **Pending** key. The key that was **Pending** becomes the **Current** key. The key that was **Current** becomes the **Previous** key.