If an encryption key is out of date, you are prompted to update it when accessing the Distributed Services Encryption dialog box. If you confirm this action, the outdated servers are updated to use the current encryption key.
If you choose not to update the encryption key when the Distributed Services Encryption dialog box is accessed, you can update it later in by selecting the server to update and clicking Update Key.
If you attempt to update the encryption key and receive the following message, you must rotate the key instead to reset the master encryption key: You cannot update a server until a master encryption key has been set. See Rotate the Encryption Key.
If an encryption key is changed three or more times while the distributed service is offline, the service must be restarted using the -configmode command line switch. Use the Reset Encryption option under the Server Settings to update the encryption key.