diff --git a/container_files/bin/setupcron.sh b/container_files/bin/setupcron.sh
index ee1ec96..2061672 100644
--- a/container_files/bin/setupcron.sh
+++ b/container_files/bin/setupcron.sh
@@ -8,6 +8,8 @@ CRONFILE=/opt/tier/tier-cron
 #build crontab file with random start time between midnight and 3:59am
 echo "#send daily beacon to TIER Central" > ${CRONFILE}
 echo $(expr $RANDOM % 59) $(expr $RANDOM % 3) "* * * /usr/bin/sendtierbeacon.sh >> /var/log/cron.log 2>&1" >> ${CRONFILE}
+echo "#rotate IdP data sealer key" > ${CRONFILE}
+echo "0 1 * * * /opt/shibboleth-idp/bin/rotateSealerKey.sh >> /var/log/cron.log 2>&1" >> ${CRONFILE}
 chmod 644 ${CRONFILE}
 
 #install crontab