PFS CR key update