diff --git a/releasenotes/notes/Add-rotate-fernet-keys-action-a1080bf5fb18413f.yaml b/releasenotes/notes/Add-rotate-fernet-keys-action-a1080bf5fb18413f.yaml
new file mode 100644
index 000000000..e78b6c8bf
--- /dev/null
+++ b/releasenotes/notes/Add-rotate-fernet-keys-action-a1080bf5fb18413f.yaml
@@ -0,0 +1,8 @@
+---
+features:
+  - In the parameters section of actions, the rotate_fernet_keys action was
+    added. It does a rotation based on the values of the generated passwords
+    or the parameter_defaults given by the user. Note that this merely does
+    the rotation, deletes the excess keys and persists the new value in the plan
+    environment. However, the action doesn't go to the nodes and adds the
+    keys to the actual repository; that's part of a separate workflow.
diff --git a/setup.cfg b/setup.cfg
index 3f7f6ecbb..56b50b600 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -88,6 +88,7 @@ mistral.actions =
     tripleo.parameters.get_passwords = tripleo_common.actions.parameters:GetPasswordsAction
     tripleo.parameters.get_profile_of_flavor = tripleo_common.actions.parameters:GetProfileOfFlavorAction
     tripleo.parameters.generate_fencing = tripleo_common.actions.parameters:GenerateFencingParametersAction
+    tripleo.parameters.rotate_fernet_keys = tripleo_common.actions.parameters:RotateFernetKeysAction
     tripleo.plan.create_container = tripleo_common.actions.plan:CreateContainerAction
     tripleo.plan.delete = tripleo_common.actions.plan:DeletePlanAction
     tripleo.plan.list = tripleo_common.actions.plan:ListPlansAction