Table of Contents
Advertisement
Available on: Data Recovery Manager
Function: Displays a form for recovering a key.
Once a key has been selected from the archive, the Recover Key By Serial Number
Interface can be used to start the recovery operation. This interface accepts the
serial number of an archived key and optionally the user ID and passwords of
recovery agents.
The recovery operation can be completed by one call to the Recover Key By Serial
Number Interface if the proper number of recovery agent user IDs and passwords
are provided. In this case, a PKCS #12 blob is returned with the recovered key and
an associated public key certificate.
The recovery operation can also be deferred if the agent passwords cannot be
immediately provided. In this case, the response from the interface is a new form
that polls the Get Approval Status Interface until the passwords are entered by
agents (from other locations) and the PKCS #12 blob can be delivered.
Default Forms
The Recover Key By Serial Number Interface typically follows a request to the
Display Key For Recovery Interface. The result of the Display Key For Recovery
Interface request is to display a key from the archive using the
displayBySerialForRecovery.template
making a request to the Recover Key By Serial Number Interface to initiate the
recovery operation for the selected key.
Request Parameters
The following table lists the parameters accepted by the Recover Key By Serial
Number interface.
Table 6-29 Parameters Accepted by the Recover Key By Serial Number Interface
Parameter
cert
Format and Description
base-64 encoded PKCS #7 certificate
You must supply the certificate containing the public key corresponding to the
key in the archive. Be sure to include the "-----BEGIN CERTIFICATE-----"
header and "-----END CERTIFICATE-----" footer.
Recover Key By Serial Number Interface
file. This template provides a form for
Chapter 6
Agent Interface Reference
153
Advertisement
Table of Contents
