Re-create Intermediates

Overview

Re-create Intermediates replaces the configuration's intermediate keys - the day-to-day keys used to enrol devices, sign configuration files and carry out other normal operations. Use it if the KEK file is lost, or if you think it has been compromised.

You will need the root key file to do this - see Master Keys.

Once the intermediate keys have been re-created, rotate the keys on every enrolled device - devices that need it show the status Key Rotation on the Devices tab. See Rotate Keys.

Re-creating the intermediates

1. Load the configuration, then from the Remote Tools menu select Configuration and double-click Re-create Intermediates
2. Read the warning and click Continue
3. Fill in the details:

Click Re-create. The new KEK file is saved with a timestamp in its name. Keep it safe and use it from now on - the old one no longer works.