>
request hsm mkey-wrapping-key-rotation
If
the master key is encrypted on the HSM, the CLI command will generate
a new wrapping key on the HSM and encrypt the master key with the
new wrapping key.
If the master key is not encrypted on the
HSM, the CLI command will generate new wrapping key on the HSM for
future use.
The old wrapping key is not deleted by this command.