Generates a new random signing key for dotCMS 4.3.3 installations. Written by Timo Müller
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

dotCMS Signing Key Generator

This tool allows the generation of a new signing key for dotCMS 4.3.3 installations.


This is a Maven repository, you can build the JAR as follow

mvn package


Starting the tool will generate a new signing key.

timo@dotcms ~/w/d/d/target> java -jar ./dotCMSSigningKeyGenerator-0.0.1-SNAPSHOT.jar 
----- dotCMS TokenGenerator PoC by MOGWAI LABS GmbH ( -----

Your config file will be somewhere arround: {dotCMSRoot}/dotserver/tomcat{versions}/webapps/ROOT/WEB-INF/classes/

Within the config file there is a line with # json.web.token.hash.signing.key={theDefaultKey}. Delete the “#” (and any leadying whitespaces) at the beginning of the line. {theDefaultKey} needs to be replaced with the new generated key.

After a restart of dotCMS the changes take effect.