Data & Cryptography

Keys, HSM & PKI

FIPS 140-3 Level 3 HSM clusters, key lifecycle to NIST SP 800-57, M-of-N ceremonies, certificates and post-quantum migration

Ceremonies

Ceremony	Type	Date	Custodians	Witness	Location	Status
KC-58	Master key backup to smart cards	2026-11-12 10:00	3 custodians	Internal Audit (ICCD)	DC1 secure room	Scheduled
KC-57	HSM partition initialisation	2026-10-02 14:00	3 custodians	Both	DC1 secure room	Completed
KC-55	Key destruction · grc-backup-2023	2026-08-19 11:00	2 custodians	Internal Audit (ICCD)	DR site secure room	Completed

Ceremony script · master key backup

1Witness

Prepare

Room sealed, cameras on, script signed

2Custodians

Authenticate

2 of 3 custodian cards presented

3HSM

Generate

Key created inside the HSM

4HSM

Split

Shamir 3-of-5 shares written to cards

5Custodians

Verify

Test restore on the DR HSM

6Witness

Seal

Cards in tamper-evident bags, safes logged

7Internal Audit

Sign off

Minutes hashed into the audit log

Quorum math: with 3 of 5 shares and each custodian available with probability 0.95, the key can be restored with probability 0.9988, while any 2 colluding custodians learn nothing about the key.Quorum calculator →