Question

A financial services company is deploying a new hardware security module (HSM) to generate and protect the root signing key for its internal code-signing PKI. The security architect must ensure that no single administrator can export, back up, or use the key material unilaterally, while still allowing recovery if some custodians are unavailable. Which control should the architect require during the key ceremony?

Accepted Answer

Configure M-of-N quorum authentication so that key backup and activation require a threshold of custodian smart cards

Answer

Store a full encrypted backup of the root key on an air-gapped USB drive held by the PKI administrator

Answer

Enable role-based access control so the senior PKI administrator has sole authority over key operations

Answer

Generate the key with a longer RSA modulus and rotate it monthly to reduce exposure