As a best practice, it is a good idea to rotate the keys in the SPAS system periodically. There is a separate article about the API keys for WLM and the like. This KB is about the SPAS server's keys.
First, be sure to make backups of the SurePass DB and your SurePass installation. This is very important to do first and confirm that you have good backups.
If you have an existing copy of the key rotation tool, you can download a patch for it from the link below.
https://downloads.surepassid.com/patches/SP_PATCH_KEYR_10072025.zip
New Installation
Key rotation tool installer: https://downloads.surepassid.com/as/SPKR_10072026.zip
Backup the system, then run the tool and follow the prompts.
We also have a KB about API key rotation: SurePassID API Key Rotation Best Practices