# 3.9.5 Keys

ZTrust employs **authentication protocols** that require **cryptographic signatures** and **encryption** to ensure secure communication.\
It uses **asymmetric key pairs**, which consist of a **private key** and a **public key**, to achieve this.

* At any given time, **only one key pair** is actively used for generating new signatures.
* Multiple **passive key pairs** are retained for verifying previously issued signatures.
* This approach allows for **seamless key rotation** without affecting users or causing downtime.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FdsddKIEfrO5kPVwcZPnH%2F20.png?alt=media&#x26;token=05de084f-0b64-4a98-9a55-18d2e43e8f96" alt=""><figcaption><p>Fig 3.9.5.a: Keys, Secure Communication with Key Pairs</p></figcaption></figure>

Click the Refresh button to see the latest settings.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FLmqiA45iYLYCDrKTe1ZP%2F1.png?alt=media&#x26;token=27b4fbdd-3c4c-47ad-9552-43b2d9af40cc" alt=""><figcaption><p>Fig 3.9.5.b: Keys, Specify the page size</p></figcaption></figure>

You can also choose how many keys you want to display on one screen. Select your preferred option from the dropdown menu as shown above.

You can use the search box to find a specific key.

**Algorithm -** Specifies the **encryption algorithm** used to generate the keys.

**Active -** The Active Key is the Key that is actively utilized when ZTrust is being used.

**Type -** This denotes the Type of Encryption Algorithm that has been utilized.

**Kid -** The **Key ID** — a unique identifier generated using the algorithm.

**Use -** Defines how the key is used. For example, **ENC** signifies encryption.

**Provider -** Indicates the **origin** or **source** of the algorithm used by ZTrust.

**Valid to -** Specifies the **expiration date** of the key.

**Public Key -** Contains the **public key** used to authenticate the sender of encrypted data.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F875pTyQTUFuGV2mZlTuu%2F2.png?alt=media&#x26;token=24fd65da-45eb-4ce4-97b2-911e5d13a599" alt=""><figcaption><p>Fig 3.9.5.c: Keys, Public key</p></figcaption></figure>

**Certificate -** Displays the **certificate** issued to the provider for authenticity. If present, it confirms the key’s **validity**.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FwbNT8qcfBq8K733GEbmC%2F3.png?alt=media&#x26;token=ab4633f9-9583-4102-89e1-02be5eec5a04" alt=""><figcaption><p>Fig 3.9.5.d: Keys, Certificate</p></figcaption></figure>

#### **Key Categories**

ZTrust organizes keys into three categories:

**1. Active Keys**

* Actively used for signing and encryption.
* Only **one active key pair** exists at any time.

**2. Passive Keys**

* Keys retained for **verifying older signatures**.
* Cannot be modified or directly used.
* Useful during **key rotation** to avoid authentication issues.

**3. Disabled Keys**

* Keys that are **no longer in use** and have been intentionally **disabled**.
* Can be searched, viewed, or deleted if no longer needed.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FnKwwv0Z3qUisiKS7SJvk%2F4.png?alt=media&#x26;token=10c24775-f6d2-4ea1-8e0e-458a883c3fd3" alt=""><figcaption><p>Fig 3.9.5.e: Keys, Specify key categories</p></figcaption></figure>

You can select the keys you want to view by clicking on the dropdown menu.

#### **Passive**

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FxuPRzTCu1SIL6XHXZxyR%2F5.png?alt=media&#x26;token=56fa0d9f-2e51-4add-b69a-b574f30ca23b" alt=""><figcaption><p>Fig 3.9.5.f: Keys, Search Passive key</p></figcaption></figure>

In the Passive Keys section, the Keys are listed, with which there is no direct engagement or interactions. You won’t have any control over these keys.

You can use the search box to find a specific key.

Click the Refresh button to see the latest settings.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FXpHd2w4wb8fzMKmjS4KP%2F6.png?alt=media&#x26;token=d46a0048-7162-4864-959b-77cbc8ebe983" alt=""><figcaption><p>Fig 3.9.5.g: Keys, Select the page format</p></figcaption></figure>

You can also choose how many keys you want to display on one screen. Select your preferred option from the dropdown menu as shown above.

#### **Disabled**

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2Fcpg7NMsKCEXFTUxJA5w0%2F7.png?alt=media&#x26;token=4d77df7c-acd6-4db5-9b0d-a7466d470838" alt=""><figcaption><p>Fig 3.9.5.h: Keys, Select disabled keys</p></figcaption></figure>

It lists down the Keys that are not enabled or are not intended for use.

You can use the search box to find a specific key.

Click the Refresh button to see the latest settings.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F378DLkJIhc7AglUSPK7y%2F8.png?alt=media&#x26;token=3f870dab-bd19-4673-b6f7-357442da86a0" alt=""><figcaption></figcaption></figure>

You can also choose how many keys you want to display on one screen. Select your preferred option from the dropdown menu as shown above.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F1AjA96Ofpf44NHOaG9uh%2F9.png?alt=media&#x26;token=298c66cb-7cd2-4853-a94b-38f19a3eac12" alt=""><figcaption><p>Fig 3.9.5.i: Keys, Add and Manage Provider Settings</p></figcaption></figure>

After clicking on Add provider, you will be redirected to the screen shown above.

You can move the providers up and down (by dragging the rows up and down) as per the priorities.

Within the Providers section, you have the option to generate a Key pair, along with a self-signed certificate.

#### **Name**

It indicates the provider's display name as shown in the Admin Console.

It also displays the option chosen from the dropdown menu.

#### **Provider**

It indicates the source or origin of the Algorithms being used by ZTrust.

#### **Provider description**

This specifies a concise description that can help you in identifying the purpose of the profile.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FQOQoYzSQIXpvLGQR5FxU%2F10.png?alt=media&#x26;token=a2cd188e-cdfe-4734-943b-28ff6aa5447d" alt=""><figcaption><p>Fig 3.9.5.j: Keys, Provider description</p></figcaption></figure>

By clicking on the three dots, you will see the option to delete.&#x20;

If you no longer need a provider, select Delete to remove it.

After clicking Delete, you will receive a confirmation prompt.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FwzJDbHYaPXsTvqR9N83c%2F11.png?alt=media&#x26;token=3f1d4d8a-c0eb-44d5-aed5-b07ec46c0096" alt=""><figcaption><p>Fig 3.9.5.k: Keys, Delete key provider</p></figcaption></figure>

Click Delete to proceed with removal, or click Cancel to abort.

After clicking on Add provider, the following prompt will appear. You can select the provider you need from the options.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FsoBR86AKIqaWsl1fMKVr%2F12.png?alt=media&#x26;token=23c31a35-60fa-489a-9310-918c869c945f" alt=""><figcaption><p>Fig 3.9.5.l: Keys, Specify keys for add providers</p></figcaption></figure>

Select  the most suitable provider option from the menu based on your requirements.

For example, rsa-generated is selected here.

This action will lead you to the following screen.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FCAce2lS1cu61fR4gJNUf%2F13.png?alt=media&#x26;token=d9c8313b-13fc-4ae3-a9d3-b0f773978a36" alt=""><figcaption><p>Fig 3.9.5.m: Keys, Specify add providers</p></figcaption></figure>

#### **Name**

It indicates the provider's display name as shown in the Admin Console.

It also displays the option chosen from the dropdown menu.

#### **Priority**

This field pertains to the priority of the provider.&#x20;

Enter any number here. The value determines whether the new Key pair becomes the Active Key pair. The highest numerical value designates the key pair as active.

#### **Enabled**

This toggle button determines whether the generated Key will be enabled or disabled.

When enabled (toggled ON), the key will be enabled. It will be either Active or Passive, but it won't be Disabled.&#x20;

If deactivated (toggled OFF), the key will be Disabled and will appear under the Disabled tab.

#### **Active**

This toggle button, when enabled (toggled ON), the newly generated Key will be created as an Active Key and will appear under the Active Keys tab.&#x20;

Conversely, when it's disabled (toggled OFF), the Key will be designated as a Passive key and will be visible under the Passive Keys tab.

#### **Key Size**

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F2LPYTCxJbC4u15YvRlRT%2F14.png?alt=media&#x26;token=b1c31252-035a-4389-a676-2e3a65109416" alt=""><figcaption><p>Fig 3.9.5.n: Keys, Specify key size</p></figcaption></figure>

This specifies the size of the generated Key.

You can select the preferred option from the dropdown menu as per your requirements.

#### **Algorithm**

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FsgWP2g3dPOwBD3ATCYio%2F15.png?alt=media&#x26;token=be68891e-9a25-41c2-8f58-70abc65abfc2" alt=""><figcaption><p>Fig 3.9.5.o: Keys, Specify algorithm</p></figcaption></figure>

This indicates the desired Algorithm for the Key.&#x20;

You can click on the dropdown menu and choose the most suitable option based on your needs.

#### **Save**

Once you've entered the details, if you wish to proceed and generate the key, simply click on the Save button.

#### **Cancel**

If you prefer not to generate a key with the provided information, click on the Cancel button to discard the changes.

\\
