SQ(1) User Commands SQ(1) (NAME) sq-key-rotate - (SYNOPSIS) sq key rotate [OPTIONS] (DESCRIPTION) ( ). . . `--can-sign` `--cannot-sign` . : . . . `--expiration` . . . (cross certify) . . `--own-key` `--shared-key` . (replay) . `sq pki vouch replay` . . . `--retire-in` . `--output` . 1.2.0. (OPTIONS) (Subcommand options) --can-authenticate --can-encrypt=PURPOSE (transport) (storage) (universal) . [ : transport storage universal] --can-sign --cannot-authenticate --cannot-encrypt --cannot-sign --cert=FINGERPRINT|KEYID --cert-email=EMAIL --cert-file=PATH PATH --cert-userid=USERID --cipher-suite=CIPHER-SUITE `key.generate.cipher-suite` . [: cv25519] [ : rsa2k rsa3k rsa4k cv25519 cv448 mldsa65-ed25519 mldsa87-ed448] --expiration=EXPIRATION EXPIRATION ISO 8601 . `N[ymwds]` . `never` . [: 3y] --new-password-file=PASSWORD_FILE . --output=FILE . --own-key . --profile=PROFILE OpenPGP OpenPGP . OpenPGP . sq : RFC4880. . RFC9580 sq . `key.generate.profile` . [: rfc4880] [ : rfc9580 rfc4880] --retire-in=TIME TIME ISO 8601 . `N[ymwds]` . `never` . [: 26w] --rev-cert=FILE FILE $HOME/.local/share/sequoia/revocation-certificates . `--output` `--rev-cert` . `--output` `-` `-` . --shared-key . . . . . --without-password (Global options) sq(1) . (EXAMPLES) Alice. sq key rotate --cert EB28F26E2739A4870ECC47726F0073F60FD0CBF0 (SEE ALSO) sq(1) sq-key(1). . (VERSION) 1.4.0 Sequoia PGP 1.4.0 SQ(1)