# Multiple ArtifactVerifyKeys?
**URL:** https://hub.mender.io/t/multiple-artifactverifykeys/4309
**Category:** General Discussions
**Tags:** signature-artifacts
**Created:** [November 15, 2021, 7:39pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309 "2021-11-15T19:39:43Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@mho](https://hub.mender.io/u/mho)
#### Post date: [November 15, 2021, 7:39pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/1 "2021-11-15T19:39:43Z")
The Mender client only accepts a single ArtifactVerifyKey: [Configuration options | Mender documentation](https://docs.mender.io/development/client-installation/configuration-file/configuration-options#artifactverifykey)
Can we support multiple keys? This is useful for key rotation, or having some devices that can accept updates that are signed with different keys.
---
### Author:  [@kacf](https://hub.mender.io/u/kacf)
#### Post date: [November 16, 2021, 7:11am UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/2 "2021-11-16T07:11:23Z")
Key rotation usually isn’t a problem, because you can use one artifact signed with key1 to deploy a new key2, which will then be used for subsequent updates. I can see that signing with multiple keys could be useful, but this is not supported at the moment.
---
### Author:  [@mho](https://hub.mender.io/u/mho)
#### Post date: [November 16, 2021, 4:59pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/3 "2021-11-16T16:59:57Z")
key rotation can definitely be done without, but it certainly makes key rotation nicer, by allowing a grace period for changing keys.
I can probably make do without this feature, since it’s not implemented. But if it were supported, it would open up more possibilities on my end.
---
### Author:  [@gigilibala](https://hub.mender.io/u/gigilibala)
#### Post date: [November 16, 2021, 6:29pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/4 "2021-11-16T18:29:22Z")
just updating the key won’t work if someone wants to update the device to a previous version (not rollback) which I think many enterprises do for many reasons. I think a good feature is to allow signing an artifact with multiple keys so the mender client can go through all the signatures and accept the first one it can verify.
---
### Author:  [@ruben](https://hub.mender.io/u/ruben)
#### Post date: [November 17, 2021, 9:35am UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/5 "2021-11-17T09:35:29Z")
I like this approach. In our use case we have multiple stakeholders which are creating application artifacts for the same device and it would be great if every stakeholder could use its own signing key
---
### Author:  [@eystein](https://hub.mender.io/u/eystein)
#### Post date: [November 17, 2021, 10:04pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/6 "2021-11-17T22:04:16Z")
I think this could be useful as well, though in general I don’t think there is a lot of interest for it so we don’t have any plans to implement it as of now.
It’s open source, so contributions are welcome. 😉
---
### Author:  [@mho](https://hub.mender.io/u/mho)
#### Post date: [September 26, 2022, 1:14pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/7 "2022-09-26T13:14:53Z")
I have a PR for this, still a WIP: [feat: Support multiple verification keys by Michaelhobo · Pull Request #1045 · mendersoftware/mender · GitHub](https://github.com/mendersoftware/mender/pull/1045)
---
### Author:  [@mho](https://hub.mender.io/u/mho)
#### Post date: [February 17, 2023, 1:42pm UTC](https://hub.mender.io/t/multiple-artifactverifykeys/4309/8 "2023-02-17T13:42:05Z")
This feature was merged last month, it should be available in Mender 3.5: [feat: document new ArtifactVerifyKeys option by Michaelhobo · Pull Request #1975 · mendersoftware/mender-docs · GitHub](https://github.com/mendersoftware/mender-docs/pull/1975)