# Migrating from Transcend-Hosted Sombra (/docs/sombra/deploying/customizing-sombra/migrating-from-transcend-hosted-sombra)

If you are migrating from a Transcend-hosted multi-tenant Sombra to an on-premises environment and are mid-implementation, it is **critical** that you re-use the same `JWT_ECDSA_KEY` from the existing instance. If you already have connected integrations and DSRs, you should deploy the on-premises Sombra gateway with the same `JWT_ECDSA_KEY` and then [run a key rotation](./key-rotation.mdx) after the gateway is deployed.

To obtain the `JWT_ECDSA_KEY`, reach out to your account manager over Slack or email ([support@transcend.io](mailto:support@transcend.io)) to grant you permission to view your key. You will only be able to reveal the key once for security reasons. The key can be obtained by clicking the `Reveal Multi Tenant Root Secret` button on the Sombra Gateways panel in the Admin UI.

**This key should not be committed to code** and should be provided to the gateway securely using a tool such as [HashiCorp Vault](https://www.vaultproject.io/) or [AWS Parameter Store](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html). See [our secrets management guide](./secrets-management.mdx) for more information.

![Obtaining the JWT_ECDSA_KEY secret](/images/2023-09-06_Sombra_Reveal_Multi_Tenant_Root_Secret.png)

![Viewing the JWT_ECDSA_KEY secret](/images/2023-09-06_Get_Multi_Tenant_Root_Secret.png)

When rotating keys, we recommend that you reach out to your Transcend support rep to help guide and monitor the process to avoid downtime.