JWT secret key management

This feature helps the administrator update the jwt.secret.key property used by JWT authentication, by writing it encrypted (via Jasypt, as an ENC(…) value) into openkm.properties.

Note

Minimum required: 64 characters. Recommended: 256 characters for enhanced security.

Caution

This secret key is an essential part of JWT authentication. Changing it invalidates all previously generated JWT tokens, requiring all users to re-authenticate. A backup of the existing openkm.properties file is created before it is modified, and an OpenKM service restart is required for the new key to take effect.

Update the JWT secret key

• Fill in the Secret Key field. The character counter turns green once it reaches the recommended 256 characters (and red below the 64-character minimum).
• Type Yes in the confirmation field.
• Click the Update JWT Secret Key button.