v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Message Signing Service

Rotate a Fleet message signing key pair

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/fleet/message_signing_service/rotate_key_pair</span></div>

Refer to Spaces for more information.

Rotate the key pair used by Fleet to sign messages sent to Elastic Agents. This operation is irreversible and requires all agents in the Fleet to be re-enrolled after rotation. You must explicitly acknowledge the risk by passing acknowledge=true as a query parameter.<br/><br/>[Required authorization] Route required privileges: fleet-agents-all AND fleet-agent-policies-all AND fleet-settings-all.

post/api/fleet/message_signing_service/rotate_key_pair

Query parameters

acknowledgeboolean

Set to true to confirm you understand the risks of rotating the key pair

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Response

Key pair rotated successfully

messagestring required