PROUTIL EPOLICY MANAGE allows you to rekey the cipher of an existing encryption policy. PROUTIL EPOLICY MANAGE requires database administrator and keystore admin privileges.

To update the key of a policy, enter the following command: 

proutil dbname -C epolicy manage object-type rekey object-name

You can only rekey the policy of an object that has previously been encrypted.