You can ensure that all ePO - On-prem servers and agents use the same Main Repository key pair in a multi-server environment using Server Settings.
This process consists of first exporting the key pair you want all servers to use, then importing the key pair into all other servers in your environment.
For details about product features, usage, and best practices, click ? or Help.
Select Menu → Configuration → Server Settings, select Security Keys from the Setting Categories list, then click Edit.
From the Edit Security Keys page next to Local main repository key pair, click Export Key Pair.
Click OK. The File Download dialog box appears.
Click Save, browse to a location that is accessible by the other servers, where you want to save the .zip file containing the secure-communication key files, then click Save.
Next to Import and back up keys, click Import.
Browse to the .zip file containing the exported Main Repository key files, then click Next.
Verify that these are the keys you want to import, then click Save.
The imported Main Repository key pair replaces the existing key pair on this server. Agents begin using the new key pair after the next agent update task runs. Once the Main Repository key pair is changed, an ASSC must be performed before the agent can use the new key.