Understanding Instana keys
When you set up Instana in a secure (air-gapped) environment, you need various keys for backend installation.
Instana backend installations require three distinct keys:
| Key Type | Purpose |
|---|---|
| Sales Key | Validates the license. Without it, the backend runs unlicensed and blocks agent ingress. |
| Download Key | Authenticates artifact downloads (agents, packages, and images) from Instana artifactory. |
| Agent Key | Authenticates data ingress from agents and other technologies (for example, EUM, serverless, and OTEL). |
downloadKey and agentKey might be the same. In air-gapped environments, they are often different.Air-gapped installation behavior
When you install the backend in an air-gapped environment, if the agent key is not explicitly provided, a random agent key is generated and stored in the backend. This key is not included in the license email, and you must retrieve it from the backend UI or configuration.
Managing agent Keys post-installation
You can manage agent keys after backend installation by using stanctl. After modifying agent keys, make sure that all agents are updated to use a valid key. Otherwise, data ingresses fail.
Troubleshooting agent key issues
Why is my agent key different from the one in the license email?
The agent key might be randomly generated during installation. Check the backend UI or configuration to retrieve the correct key.
Can I use the download key as the agent key?
Only if explicitly configured. This is common in SaaS setups but not in air-gapped environments.
How do I fix agent connectivity issues due to key mismatch?
Retrieve the correct agent key from the backend. Update the agent configuration to use the valid key.