# Aes and hmac realm keys

**URL:** <https://forum.keycloak.org/t/aes-and-hmac-realm-keys/685>\
**Category:** Miscellanaeous\
**Created:** [December 12, 2019, 5:05pm UTC](https://forum.keycloak.org/t/aes-and-hmac-realm-keys/685 "2019-12-12T17:05:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![fidgi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/fidgi/32/92_2.png) [@fidgi](https://forum.keycloak.org/u/fidgi)\
**Post date:** [December 12, 2019, 5:05pm UTC](https://forum.keycloak.org/t/aes-and-hmac-realm-keys/685/1 "2019-12-12T17:05:07Z")

</div>

Hi,

What are the purpose of the aes-generated and the hmac-generated realm keys that can be listed in the realm settings keys tab ?

Should I periodically rotate those keys as well as the rsa key pair ?

Regards,

---

<div class="post-metadata">

**Author:** ![abstractj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/abstractj/32/9_2.png) [@abstractj](https://forum.keycloak.org/u/abstractj)\
**Post date:** [December 13, 2019, 12:36pm UTC](https://forum.keycloak.org/t/aes-and-hmac-realm-keys/685/2 "2019-12-13T12:36:04Z")

</div>

@fidgi I’d suggest to take a look at this part of the documentation [https://www.keycloak.org/docs/latest/server\_admin/index.html#realm\_keys](https://www.keycloak.org/docs/latest/server_admin/index.html#realm_keys). It may clarify a lot of questions you have around this.

---

<div class="post-metadata">

**Author:** ![fidgi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/fidgi/32/92_2.png) [@fidgi](https://forum.keycloak.org/u/fidgi)\
**Post date:** [December 13, 2019, 10:22pm UTC](https://forum.keycloak.org/t/aes-and-hmac-realm-keys/685/3 "2019-12-13T22:22:40Z")

</div>

Hi,

This is the thing I did before posting my.question. Still I don’t understand why there are an aes and hmac generated keys since the documentation states : "Keycloak currently only supports RSA signatures " ?