How to change the RUSTFS_SECRET_KEY and RUSTFS_ACCESS_KEY for a existing instance

[k88936]

I mistakenly used the default value at first. and I copied bucket from my old site.

I tried to restart the instance with a different env var for those secret.
but it failed to start:
load policy doc failed: crypto: decrypt failed
I guess that was crypted with old secret.

so how can I change them.

[bezlim]

Hello and thank you for your job with rustfs! I have the same issue. Failed restart with another RUSTFS_SECRET_KEY. I use last binary from https://dl.rustfs.com/artifacts/rustfs/release/rustfs-linux-x86_64-musl-latest.zip

[2026-02-05 08:58:40.243732 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:1383] [main:ThreadId(1)] find_file_info_in_quorum: inspecting meta index=0 valid=true version_id=None mod_time=Some(2026-02-05 8:47:28.104508708 +00:00:00) deleted=false size=74

[2026-02-05 08:58:40.243747 +00:00] DEBUG [rustfs_ecstore::store_api] [crates/ecstore/src/store_api.rs:139] [main:ThreadId(1)] new; oi=ObjectInfo { bucket: ".rustfs.sys", name: "config/iam/format.json", storage_class: Some("STANDARD"), mod_time: Some(2026-02-05 8:47:28.104508708 +00:00:00), size: 74, actual_size: 0, is_dir: false, user_defined: {"x-rustfs-internal-inline-data": "true"}, parity_blocks: 0, data_blocks: 1, version_id: None, delete_marker: false, transitioned_object: TransitionedObject { name: "", version_id: "", tier: "", free_version: false, status: "" }, restore_ongoing: false, restore_expires: None, user_tags: "", parts: [ObjectPartInfo { etag: "4d2882517be42b0f8cb274a74ce2c99d", number: 1, size: 74, actual_size: 74, mod_time: None, index: None, checksums: None, error: None }], is_latest: true, content_type: None, content_encoding: None, expires: None, num_versions: 1, successor_mod_time: None, put_object_reader: None, etag: Some("4d2882517be42b0f8cb274a74ce2c99d"), inlined: true, metadata_only: false, version_only: false, replication_status_internal: None, replication_status: Empty, version_purge_status_internal: None, version_purge_status: Empty, replication_decision: "", checksum: None }

[2026-02-05 08:58:40.243952 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2274] [rustfs-worker:ThreadId(31)] get_object_with_fileinfo; bucket=".rustfs.sys" object="config/iam/format.json" offset=0 length=74 set_index=0 pool_index=0 start_time=2026-02-05 8:58:40.243941396 +00:00:00

[2026-02-05 08:58:40.244112 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2295] [rustfs-worker:ThreadId(31)] get_object_with_fileinfo start bucket=".rustfs.sys" object="config/iam/format.json" requested_length=74 offset=0

[2026-02-05 08:58:40.244131 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2320] [rustfs-worker:ThreadId(31)] Multipart read bounds bucket=".rustfs.sys" object="config/iam/format.json" offset=0 length=74 end_offset=73 part_index=0 last_part_index=0 last_part_relative_offset=73

[2026-02-05 08:58:40.244702 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2328] [rustfs-worker:ThreadId(31)] Multipart part indices to stream bucket=".rustfs.sys" object="config/iam/format.json" part_indices=[0]

[2026-02-05 08:58:40.244750 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2355] [rustfs-worker:ThreadId(31)] Streaming multipart part bucket=".rustfs.sys" object="config/iam/format.json" part_index=0 part_number=1 part_offset=0 part_size=74 part_length=74 read_offset=0 till_offset=74 total_read_before=0 requested_length=74

[2026-02-05 08:58:40.244758 +00:00] INFO [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2416] [rustfs-worker:ThreadId(31)] Shard availability check bucket=".rustfs.sys" object="config/iam/format.json" part_number=1 total_shards=1 available_shards=1 missing_shards=0 data_shards=1 parity_shards=0

[2026-02-05 08:58:40.244830 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2468] [rustfs-worker:ThreadId(31)] Finished decoding multipart part bucket=".rustfs.sys" object="config/iam/format.json" part_index=0 part_number=1 part_length=74 bytes_written=74

[2026-02-05 08:58:40.244848 +00:00] DEBUG [rustfs_ecstore::set_disk] [crates/ecstore/src/set_disk.rs:2524] [rustfs-worker:ThreadId(31)] Multipart read finished bucket=".rustfs.sys" object="config/iam/format.json" total_read=74 expected_length=74

[2026-02-05 08:58:40.245673 +00:00] WARN [rustfs_iam::store::object] [crates/iam/src/store/object.rs:137] [main:ThreadId(1)] Failed to decrypt IAM config data, treating as unencrypted