---
title: "Publisher Key Management"
slug: "publisher-key-management"
description: "Import, update, compare, and delete the publisher public keys that SysTrack needs to approve signed actions on the Publisher Key Management tab."
status: "update"
updated: 2026-11-05T08:26:07Z
published: 2026-11-05T08:26:07Z
canonical: "documentation.lakesidesoftware.com/publisher-key-management"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.lakesidesoftware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Publisher Key Management

On the **Publisher Key Management** tab, you manage the public keys of action publishers. SysTrack needs the public key of a publisher to approve the signed actions of that publisher. For example, to import and approve signed actions from another SysTrack tenant, you need the public key for those actions. The tab is in **Configure** > **Tools** > **Automations and Collection Extensions** > **Publisher Key Management**.

In SysTrack Cloud, actions that you build with **Create Action** on the **Action Governance** tab are signed with the publisher key of your tenant. SysTrack creates this key when your tenant is built and adds its public key to the **Public Keys** table, with a publisher name that starts with Tenant-. Actions that you build with LSActionBuilder are signed only when you sign them with your own private key. See [Build Actions with LSActionBuilder](/documentation/docs/build-actions-with-lsactionbuilder).

Publishers give their public keys to SysTrack users themselves. Lakeside Software does not distribute them. A publisher sends its public key through a different channel from the actions, so that users know who created the actions.

## Prerequisites

- The **Action Governance - Management** permission. Without it, the **Publisher Key Management** tab does not show. See [Configure Action Governance Permissions](/documentation/docs/configure-action-governance-permissions-1).
- Edit mode. To make changes on the **Publisher Key Management** tab, click the lock in the upper-right corner of the page. While the page is locked, all buttons on the tab are unavailable.

## Public Keys Table

The **Public Keys** table on the **Publisher Key Management** tab lists the publisher keys in SysTrack. A search box over the table, on its right, searches the list of publisher keys.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(204).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)

The toolbar of the **Public Keys** table has two icons:

- **Import**: Imports the public key of a new publisher.
- **Delete**: Deletes the selected key.

Under the **Public Keys** table are three buttons: **Update Key**, **Compare Key With Key In File**, and **Compare Key In File To All**. **Delete**, **Update Key**, and **Compare Key With Key In File** need a selected key in the table.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(205).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)

| Column Name | Description |
| --- | --- |
| Publisher | The name of the publisher. |
| Public Key | The public key value. |

## Import a Public Key

Import a public key from another SysTrack tenant, or from a key pair that you use to sign actions with LSActionBuilder. The public key file must be a .pem file that starts with `-----BEGIN PUBLIC KEY-----`.

1. In **Configure**, go to **Tools** > **Automations and Collection Extensions** > **Publisher Key Management**, and click the lock to unlock the page.
2. Click the **Import** icon.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(206).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)
3. In **Publisher**, enter the publisher name. It must exactly match the publisher name of the actions that the key signs. The name cannot contain `\ / : * ? " < > |`. For example, the action ACTION123, exported from the tenant MyTenant with the publisher name Tenant-MyTenant, needs a public key imported with the publisher Tenant-MyTenant.
4. In **Key File**, click **Choose File**, select the key file, and click **Open**.
5. Click **OK**.

If the publisher already has a key, SysTrack does not import the new key. Use [Update Key](/documentation/docs/publisher-key-management#UpdateKey) instead.

To check the result, find the publisher in the **Public Keys** table.

## Update Key

Replace the public key of a publisher that is already in the **Public Keys** table. The publisher name in the table must exactly match the publisher name of the action on the **Action Governance** tab for the key to match.

1. On the unlocked **Publisher Key Management** tab, select the key in the **Public Keys** table.
2. Click **Update Key**.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(207).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)
3. Click **Choose File**, select the key file, and click **Open**.
4. Click **OK**.

## Compare Key With Key In File

Check that SysTrack has the correct public key for a publisher by comparing the key in the **Public Keys** table with a key file.

1. On the unlocked **Publisher Key Management** tab, select the key in the **Public Keys** table.
2. Click **Compare Key With Key In File**.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(208).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)
3. Click **Choose File**, select the key file, and click **Open**.
4. Click **OK**.

## Compare Key In File To All

Find the publisher of a public key by comparing a key file with all keys in the **Public Keys** table. You do not need to select a key.

1. On the unlocked **Publisher Key Management** tab, click **Compare Key In File To All**.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(209).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)
2. Click **Choose File**, select the key file, and click **Open**.
3. Click **OK**.

The result names the publisher whose key matches the key in the file, or says that the key does not match any public key on record.

## Delete a Public Key

Delete the public key of a publisher from the **Public Keys** table.

> [!CAUTION]
> **WARNING**: Deleting a publisher key disables every action from that publisher and moves it back to **Pending Approval**, including actions built with **Create Action** when you delete the key of your tenant. Their automations do not run until the actions are approved again.

1. On the unlocked **Publisher Key Management** tab, select the key in the **Public Keys** table.
2. Click the **Delete** icon.
3. Confirm the deletion.

To check the result, check that the publisher is no longer in the **Public Keys** table.