Public Key Management and Rotation

Manage and safely rotate Keymint Ed25519 public keys for offline license verification while keeping existing deployed clients trusted during migration.

Public keys identify the Ed25519 keys used to verify offline .lic files. Manage them under Developer → Public Keys.

Add a key

Add the vendor public key PEM and an optional label. The key ID (kid) in a signed license must match a trusted registry entry for verification to succeed.

Rotate safely

1. Add the new public key while keeping the current key trusted.
2. Start signing new licenses with the new key.
3. Ship an application update containing both public keys.
4. Wait until supported clients have updated, then remove the old key only when no active license requires it.

Removing a key immediately can make older offline licenses unverifiable. See Offline Verification for the client-side trust and signature flow.