 The keys can be changed as frequently as desired based on key-management policies enforced at the site.Zero-Message Master-Key Update
The preceding section describes how the nodes can compute one long-term key, Kij or Kijn.Changing this key requires issuing a new certificate to one or the other principal.