Organization Considerations for Retrieval of Stored Data via Key Recovery Methods

摘要

The purpose of this document is to identify technical and procedural issues that need to be considered when selecting and deploying key recovery systems to enable emergency recovery of data that is stored or archived in encrypted form. Emergency recovery of encrypted data is necessary in the event that the decryption keys are unavailable through normal key management mechanisms. In many cases, the need to support emergency recovery of encrypted data is vital to ongoing operations and jurisdictional policy compliance. A disaster recovery plan may also give consideration to an ability to recover many data keys by using a single key recovery request.