# confluent secret file rotate ## Description This command rotates either the master or data key. To rotate the master key, specify the current master key passphrase flag (`--passphrase`) followed by the new master key passphrase flag (`--passphrase-new`). To rotate the data key, specify the current master key passphrase flag (`--passphrase`). ```none confluent secret file rotate [flags] ``` ## Flags ```none --local-secrets-file string REQUIRED: Path to the encrypted configuration properties file. --passphrase string REQUIRED: Master key passphrase. --passphrase-new string New master key passphrase. --master-key Rotate the master key. Generates a new master key and re-encrypts with the new key. --data-key Rotate data key. Generates a new data key and re-encrypts the file with the new key. -o, --output string Specify the output format as "human", "json", or "yaml". (default "human") ``` ## Global Flags ```none -h, --help Show help for this command. --unsafe-trace Equivalent to -vvvv, but also log HTTP requests and responses which might contain plaintext secrets. -v, --verbose count Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace). ``` ## See Also * [confluent secret file](index.md#confluent-secret-file) - Secure secrets in a configuration properties file.