# identityserver-key-management

> Claude/Codex skill by [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars · Updated 2026-10-16

Managing cryptographic signing keys in Duende IdentityServer, including automatic key management, KeyManagementOptions, data protection at rest, static key configuration, migration from static to automatic, and multi-instance deployment considerations, HSM/cloud KMS signing, key backup, and key-compromise response.

Tags: ai-agents, claude, claude-code

## Install

```sh
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-key-management ~/.claude/skills/identityserver-key-management
```

## From README

Key Management and Signing When to Use This Skill Configuring automatic key management for signing token keys Setting up static/manual signing keys from certificates or key vaults Configuring key rotation intervals and key lifecycle Migrating from static keys to automatic key management Deploying IdentityServer in load-balanced or multi-instance environments Protecting keys at rest using data protection Configuring per-algorithm or per-resource signing Troubleshooting key-related errors (CryptographicException, unprotecting key failures) Integrating an HSM or cloud KMS (e.g. Azure Key Vault) for signing Backing up signing keys and responding to a suspected key compromise Docs: https://docs.duendesoftware.com/identityserver/fundamentals/key-management/ Core Concepts IdentityServer issues cryptographically signed tokens: identity tokens, JWT access tokens, and logout tokens. These signatures require key material that can be managed automatically or manually (statically).

## Links

- HTML page: https://omgskills.com/library/duendesoftware/duende-skills/skills/identityserver-key-management/
- GitHub: https://github.com/DuendeSoftware/duende-skills
- Author: [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md)

## More from this repo

- [aspnetcore-authentication](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authentication/index.md) — ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [aspnetcore-authorization](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authorization/index.md) — ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [claims-authorization](https://omgskills.com/library/duendesoftware/duende-skills/skills/claims-authorization/index.md) — Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars