Translations:ReleaseNotes/Kilo/154/en
Fernet tokens require symmetric encryption keys which can be established using keystone-manage fernet_setup
and periodically rotated using keystone-manage fernet_rotate
. These keys must be shared by all Keystone nodes in a multi-node (or multi-region) deployment, such that tokens generated by one node can be immediately validated against another.