Red Hat CERTIFICATE SYSTEM 8 - AGENTS GUIDE Agents Manual page 100

Chapter 7. DRM: Recovering Encrypted Data
The number of key recovery agent authorizations required to recover a key is configured by the
DRM administrator by setting the following parameters in the CS.cfg file.
kra.noOfRequiredRecoveryAgents=1
kra.recoveryAgentGroup=Data Recovery Manager Agents
4. Set the PKCS #12 token password that the requester uses to import the recovered certificate/key
pair package.
5. Optionally, set a certificate nickname for the archived key.
6. Paste the base-64 encoded certificate corresponding to the archived key into the text area. (The
certificate can be searched and viewed through the Certificate Manager agent services pages.)
If the archived key was found through the corresponding public key, the certificate information is
automatically transferred to the form.
7. Click Recover to initiate the key recovery request.
90