> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/v4/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/v4/llms-full.txt.

# Create account secret change task 

Enterprise Edition

Automated credential rotation

Requires JumpServer Enterprise Edition. Bulk-rotate SSH keys and passwords across all assets on a custom schedule — with audit trails and email notifications included.

[Start 14-day trial](https://www.jumpserver.com/free-trial)[View pricing](https://www.jumpserver.com/pricing)[Contact sales](https://www.jumpserver.com/contact)

**Change secrets** refers to bulk modification of account login secrets and keys on hosts. Enables centralized management across multiple asset accounts, with custom rotation cycles and optional email notifications for task results.


1

At the top-left of the page, select , then click  **PAM**.

![image](/docs/images/docs/navs/nav-pam.png)

2

In the left menu, click **<Icon name="ChangePassword" /> Change secrets**.

3

On the right page, click the **Change secret tasks** tab.

4

Click **+ Create**.

5

In the **Name** field, type the task name.

6

In the **Accounts** field, type one or more usernames for which you want to change the secrets.

7

In the **Assets** field, select one or more assets. The task changes secrets for all accounts under the selected assets.

8

In the **Nodes** field, select one or more nodes. The task changes secrets for all accounts under the selected nodes and their subnodes.

9

In the **Secret strategy** field, you can choose "Specific secret" to set it manually, or "Random generate" to generate it randomly.

10

In the **Secret type** field, you can choose either "Password" or "SSH key".

11

In the **Password** field, type a password. (Specific secret & Password)

12

In the **SSH key strategy** field, you can choose "Replace (Replace only keys pushed by JumpServer)" or "Empty and append SSH KEY". (SSH Key)

13

In the **Private key** field, paste your private key. (Specific secret & SSH key)

14

In the **Key password** field, type the private key password. (Specific secret & SSH key)

15

In the **Password rules** field, set password rules, including length, uppercase and lowercase letters, numbers, special characters, and excluded characters. (Random generate & Password)

16

In the **Parameters** field, configure secret change parameters.

Note

Parameters can be configured only when selecting a Host-type asset or a node containing Host-type assets.

17

In the **Periodic** field, check to enable scheduled execution.

18

In the **Check connection after change** field, check to verify the connection after the push task is completed.

19

In the **Active** field, check to enable the task.

20

In the **Description** field, type the task description.

21

Click **Submit**.