---
title: pingcli pingfederate key-pairs signing rotation-settings apply
description: Update signing key pair rotation settings
component: pingcli
version: 1.6
page_id: pingcli:command_reference:pingcli_pingfederate_key-pairs_signing_rotation-settings_apply
canonical_url: https://developer.pingidentity.com/pingcli/1.6/command_reference/pingcli_pingfederate_key-pairs_signing_rotation-settings_apply.html
llms_txt: https://developer.pingidentity.com/pingcli/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: August 13, 2026
section_ids:
  synopsis: Synopsis
  examples: Examples
  options: Options
  options-inherited-from-parent-commands: Options inherited from parent commands
  more-information: More information
---

# pingcli pingfederate key-pairs signing rotation-settings apply

Update signing key pair rotation settings

## Synopsis

Idempotently update the rotationSettings singleton for a PingFederate signing key pair. Apply is an alias for replace on this singleton resource.

```
pingcli pingfederate key-pairs signing rotation-settings apply [flags]
```

## Examples

```
  # Update rotation settings from a JSON file
  pingcli pingfederate key-pairs signing rotation-settings apply --signing-key-pair-id <id> --from-file rotation-settings.json

  # Update rotation settings from stdin
  pingcli pingfederate key-pairs signing rotation-settings apply --signing-key-pair-id <id> --from-file - < rotation-settings.json

  # Update rotation settings from flags, without --from-file
  pingcli pingfederate key-pairs signing rotation-settings apply --signing-key-pair-id <id> --creation-buffer-days 5 --activation-buffer-days 2 --valid-days 365 --key-algorithm RSA --key-size 2048 --signature-algorithm SHA256withRSA
```

## Options

```
  -f, --from-file string               Path to a JSON file containing the request body, or "-" to read from stdin.
  -h, --help                           help for apply
      --activation-buffer-days int64   Buffer days before key pair expiration for activation of the new key pair
      --creation-buffer-days int64     Buffer days before key pair expiration for creation of a new key pair
      --key-algorithm string           Key algorithm for the new key pair
      --key-size int64                 Key size in bits for the new key pair
      --signature-algorithm string     Signature algorithm for the new key pair
      --signing-key-pair-id string     The persistent, unique ID of the parent PingFederate signing key pair
      --valid-days int64               Valid days for the new key pair
```

## Options inherited from parent commands

```
  -C, --config string           The relative or full path to a custom Ping CLI configuration file. (default $HOME/.pingcli/config.yaml)
  -D, --detailed-exitcode       Enable detailed exit code output. (default false) 0 - pingcli command succeeded with no errors or warnings. 1 - pingcli command failed with errors. 2 - pingcli command succeeded with warnings.
  -O, --output-format string    Specify the console output format. (default text) Options are: json, ndjson, ndjson-typed, ndjson-wrapped, text.
  -P, --profile string          The name of a configuration profile to use.
      --debug                   Enable debug output for error messages, including stack traces and transaction IDs. (default false)
      --log-file string         Write logs to a file at the given path. File logging is disabled when not set.
      --log-file-level string   Set the file log level. Options are: DEBUG, INFO, WARN, ERROR. (default DEBUG)
      --log-level string        Set the console log level. Options are: DEBUG, INFO, WARN, ERROR. (default WARN)
      --no-color                Disable text output in color. (default false)
      --query string            JMESPath expression to filter JSON output. Requires -O json, ndjson, ndjson-typed, or ndjson-wrapped. Example: --query 'data[?enabled].name'
```

## More information

* [pingcli pingfederate key-pairs signing rotation-settings](pingcli_pingfederate_key-pairs_signing_rotation-settings.html) - PingFederate signing key pair rotation settings