Rotating Container Config Keys

A config key defines a container's entire configuration. It is referenced whenever a container is deployed, starts or scales up. 

It may become necessary to replace the config key in use with a new one. Reasons for replacing a key include:

• It is suspected that the config key in use has been leaked.
• Security compliance requirements mandate rotating config keys.

If a config key in use is regenerated, the container and applications associated with it will stop working. They must be redeployed with a new key. Barracuda WAF-as-a-Service allows you to easily generate and rotate keys. 

Generating a New Config Token

1. From the Resources tab, navigate to WAF Containers > Container Management.
2. Find your container in the table and expand the menu in the Actions column.
3. Select Manage Config Keys.

4. The modal that opens shows two config keys. Click the Regenerate link to replace either one with a newly generated key.

   Important

   Make sure you do not regenerate a config key that is used by any running containers. Convert them to the other key beforehand.

Rotating a Config Key

To switch a container to a different config key, do the following:

1. From the Resources tab, navigate to WAF Containers > Container Management.
2. Find your container in the table and expand the menu in the Actions column.
3. Select Manage Config Keys.
4. Copy the config key that you want to use.
5. Manually edit the container deployment file you used to deploy the container. Replace the old config key with the new one.
6. Redeploy the Container.

If you no longer have the container deployment file, you can Create a New Container Deployment File. As you go through the wizard to help you create a new file, select the new config key on the Container Deployment Advanced Options screen. Then Redeploy the Container.