Agent Client Collector (ACC) - API Key change - Encryption

[xbr]

Hello Community,

so i want to update the API Key in the acc.yml on our ACC service, as they can expire.
I already created a new API Key on [mid_webserver_api_key_credentials]. I can view the API Key.
But this is not an encrypted API Key, which i need to put into the acc.yml files parameter, api-key: "encrypted:<API_KEY>". 
As i understand this is done when installing the ACC, as it asks for the API Key (MID Server API Key) in the setup.

Is there any Instance module where i can do that? Is there a script, "encrypt.bat", somwhere, which i couldn't find?

I could not find any documentation on how to change the API Key on an already installed ACC. 
So i ask for your help. How can i do that, where to find the documentation for it!
Or do I need to create an API key that does not expire and reinstall the ACC?

Thank you for your responses in advance. 

[Severin Launiau]

@xrb: the API key is encrypted in the acc.yml at the time the agent starts. The symmetrical key is stored at the end of the file. I don't think you can have a separate "encrypt.bat" since the algorithm is proprietary, but you can push the new configuration file (either with the plain text api key or using the encrypted + agent_key), and restart the service on all your agents. To push that file, use the tools you normally use to deploy your agent at scale.

More information in the webinars from KB1122613.

Séverin

[Doci1 · Accepted solution]

You dont need the encrypted API key. Just paste it as you see it in the intance to acc.yml file and restart the ACC service. After restart you will see encrypted API Key.

[Nilanjan1]

@Doci1 Is it like placing the API key in the encrypted line of acc.yml and then restarting the agent services... the servers are stuck in queue for more than a week in collecting mode also what does clear assets stand for ?

[Doci1]

stucked in collecting state? And what says the ACC log? DOes ACC service restart helped?