Managing cryptographic signing keys in Duende IdentityServer, including automatic key management, KeyManagementOptions, data protection at rest, static key configuration, migration from static to automatic, and multi-instance deployment considerations, HSM/cloud KMS signing, key backup, and key-compromise response.
Install
npx skills add DuendeSoftware/duende-skills --skill identityserver-key-managementnpx skills add DuendeSoftware/duende-skills --skill identityserver-key-management -a claude-code -gnpx skills add DuendeSoftware/duende-skills --skill identityserver-key-management -a codex -ggemini skills install https://github.com/DuendeSoftware/duende-skills.git --path skills/identityserver-key-managementgh skill install DuendeSoftware/duende-skills identityserver-key-managementgit clone --depth 1 https://github.com/DuendeSoftware/duende-skills /tmp/DuendeSoftware__duende-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-key-management ~/.claude/skills/identityserver-key-management # Claude Code
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-key-management ~/.agents/skills/identityserver-key-management # Codex, Cursor, Gemini CLI, Copilot, OpenCode