What happens if a provisioning key is deleted in ZPA?

A provisioning key in Zscaler Private Access (ZPA) is used to enroll and authenticate an App Connector with the ZPA cloud. Each key is tied to a specific App Connector group. If an administrator deletes a provisioning key from the ZPA Admin Portal, the trust relationship is broken. Consequently, all App Connectors that were previously enrolled using that specific key are immediately revoked and can no longer connect to the ZPA cloud to provide access to applications.

B. Deleting a security credential like a provisioning key is a permanent action for security reasons; it is not stored for future reactivation.

C. This is an overstatement. While access via the revoked connectors is lost, clients can still access applications through other active App Connectors.

D. Provisioning keys are security tokens that must be manually created by an administrator; they do not regenerate automatically upon deletion.

1. Zscaler Help Portal. "About Provisioning Keys". Section: "About Provisioning Keys". The portal notes, "If you delete a provisioning key, all App Connectors that were enrolled using this key are revoked."

2. Zscaler Help Portal. "Configuring Provisioning Keys". This guide details the manual process of creating and managing keys, confirming they are not automatically generated.