Table of Contents
Advertisement
Choose whether to authorize recovery locally.
7.
If you select this option, assemble the required number of key recovery
agents and have each agent fill in his or her user name and password.
If you deselect this option, notify the key recovery agents that a recovery
has been initiated, giving them the recovery authorization reference
number indicated on this form. (For information on how to provide a
remote authorization, see "Remote Recovery Authorization" on page 71.)
Click Recover Now.
8.
If you chose local authorization, the recovery is completed immediately,
and the recovered certificate and key pair are sent to your browser in the
form of a PKCS #12 package.
If you chose remote authorization, you must wait for the recovery agents
to enter their authorizations. As they do so, a status page informs you of
the progress. When the required number of recovery agents have
completed their authorizations, the recovery is completed and the
recovered certificate/key pair package is sent to your browser.
In the dialog box that appears, specify the path and filename for saving the
9.
encrypted file that contains the recovered certificate and key pair.
Send the encrypted file to the requesting party.
10.
Inform the requesting party of the recovery password in a secure manner.
11.
The recovering party must use this password to import the recovered
certificate/key pair package into his or her client software.
Remote Recovery Authorization
By default, recovery authorization is local. That is, when you initiate the recovery,
you assemble the required number of recovery agents, and all of them enter their
IDs and passwords on the same Authorize Key Recovery form on your system.
When you click Recover Now, the recovery is completed, and you receive the
encrypted file that contains the recovered key and certificate.
Chapter 5
Recovering Encrypted Data
Recovering Keys
71
Advertisement
Table of Contents
