Skip to content

Backup & Disaster Recovery

Ensuring business continuity requires robust backup and recovery strategies for your signing infrastructure.

  • HSM Backups: Reliance on vendor-specific backup mechanisms (e.g. nCipher Security World, Thales Backup tokens).
  • Wrapped Keys: Export keys only in wrapped format using a transport key.
  • Auditing: Log all backup and restore operations securely.
  • Maintain active-active or active-passive HSM clusters across regions.
  • Perform regular unauthorized restoration drills to verify backup integrity.
  • Define RTO (Recovery Time Objective) and RPO (Recovery Point Objective) for signing services.
  • Never backup private keys in plaintext.
  • Store backup media in secure, offline storage (e.g. physical safe).
  • Use quorum authorization for key restoration operations.