Home > Storage > ObjectScale and ECS > Product Documentation > Dell ECS: Data at Rest Encryption > PSO/TSO considerations
All new keys and KEK records are stored in the RT. Rotation of keys during a TSO is not supported. If TSO happens during key rotation, then the key rotation task will be suspended until the system comes out of TSO. Note that if the ActiveRotationKey has not been changed, the old rotation key will be used. When it is changed, the new one will be used whether or not the rotation task history or state has been changed. Similar to TSO, key rotation is not supported while PSO is in progress. This means that the system must come out of PSO before key rotation is enabled. If a PSO happens during rotation, the task will fail immediately.