# Change Consensus Key

The Othentic CLI allows you to easily change the Consensus or BLS key used to sign off-chain attestations. This guide covers the commands and key configurations needed.

#### Read More

* [Operator Key Separation](https://docs.othentic.xyz/main/learn/advanced-concepts/key-management)
* [CLI Command Reference](https://docs.othentic.xyz/main/reference/othentic-cli/othentic-cli-operator/bls)

## Prerequisites

1. Othentic CLI installed
2. Operator account registered to an AVS
3. AVS Attestation Center address
4. [New Consensus key](https://docs.othentic.xyz/main/user-guide/generate-keys#option-1-generate-raw-keypair)

***

Before running the command, make sure you have the raw key [as outlined in this guide.](https://docs.othentic.xyz/main/user-guide/generate-keys#option-1-generate-raw-keypair)

{% stepper %}
{% step %}

### Run the command

```
otcli operator bls update
```

{% endstep %}

{% step %}

### Enter the Controller key

{% hint style="info" %}
Make sure to input the raw 32-byte private key that controls the Operator Account, **without** leading `0x`.
{% endhint %}
{% endstep %}

{% step %}

### Enter the Attestation Center contract address

{% endstep %}

{% step %}

### Enter your new Consensus key

{% hint style="info" %}
Make sure to input the raw 32-byte Consensus key, **without** leading `0x`.
{% endhint %}
{% endstep %}
{% endstepper %}