anchor.diff:  
   1. Remove the old encryption key from your manifest.
   
  -    ```yaml
  +    ```
       ...
       properties:
         ...
  
positive.code:           -----END RSA PRIVATE KEY-----
     ```
  
  2. Replace the old server and agent certificates and keys with the new
     certificates and keys. Deploy Cloud Foundry using your updated manifest.
  
      ```yaml
      ...
      properties:
        ...
  
negative.code:           -----END RSA PRIVATE KEY-----
     ```
  
  ## <a id='rotating-encryption-key'></a>Rotate Encryption Key
  
  To rotate your encryption key, perform the steps below.
  
  1. In the `encrypt_keys` field of your manifest, insert the new encryption key above the old encryption key. Do not remove old encryption key. 
  
      ```
      ...
      properties:
        ...
  