https://www.wvds.it/wiki/ 2026-05-22T20:30:44+00:00 https://www.wvds.it/wiki/ https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-01-30T01:29:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:disaster-recovery:ca-backup-restore&rev=1769736542&do=diff CA Backup/Restore Critical: CA keys are the most valuable asset of the PKI! RTO: 4 hours | RPO: 24 hours Procedures for backing up and restoring CA keys and certificates. ---------- Backup Components Component Criticality Backup Frequency --- text/html 2026-01-30T01:29:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:disaster-recovery:key-ceremony&rev=1769736586&do=diff Key Ceremony Purpose: Secure, auditable generation of CA keys Participants: At least 3-4 persons (split control) Duration: 2-4 hours Formal procedure for generating CA keys with split responsibility and audit trail. ---------- Why Key Ceremony? text/html 2026-01-30T01:30:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:disaster-recovery:notfall-revocation&rev=1769736626&do=diff Emergency Revocation SEV-1 Incident: Immediate response on CA compromise! RTO: 1 hour | Decision makers: CISO + PKI Lead Procedure for mass revocation of certificates on CA compromise. ---------- When Emergency Revocation? Trigger Example Action text/html 2026-01-30T01:28:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:disaster-recovery:start&rev=1769736506&do=diff Disaster Recovery Critical: These runbooks should be tested regularly! Target audience: PKI Administrators, Security Team Emergency procedures for CA failures, compromises, and recovery. ---------- Overview ---------- Scenarios Scenario