Escrow Groups

Access Escrow Groups

There is no front-end access to escrow groups because they are decentralized in tiCrypt.
Escrow groups are offline meetings among members who know each other in person.

Create a New Escrow Group

To Site-key Admin

1. Open Connect Application.
2. Select your deployment card.
3. In the login window, select Site-key category.
4. Click Load key in the login page.
5. In the pop-up, select your site-key file from your local machine, and click Open.
6. Enter your account password.
7. Click Login.
8. In the site-key dashboard, click the Add escrow group button in the top left.
9. In the pop-up, enter the escrow group name.
10. Click Create Request.
11. Under New Escrow Group card, tick Sign to sign the group certificate.
12. Enter your password in the field at the top right panel.
13. Click Sign all.
14. Select the signed escrow group card in the top right panel.
15. In the pop-up, click Export to download it locally.
16. Send the signed escrow group file to a Super-Admin.

To Super-Admin

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Escrow section.
3. Click the Escrow Certificates in the left panel.
4. Click the Execute signed certificates button in the top right panel.
5. In the pop-up, click Browse Files.
6. Select the escrow certificate file from your local machine and click Open.
7. To execute, click Apply.

Add Escrow Users to an Existing Escrow Group

Upon account registration, users must select an escrow group.
For best practices, Site-key Admins and Super-Admins should create a dedicated escrow group for all users to facilitate private key recovery in case of password loss

Edit an Existing Escrow Group

To Site-key Admin

1. Open Connect Application.
2. Select your deployment card.
3. In the login window, select Site-key category.
4. Click Load key on the login page.
5. Open your site-key file from your local machine.
6. Enter your account password.
7. Click Login.
8. In the site-key dashboard, click the Add escrow group button in the top left.
9. In the pop-up, enter the escrow group name.
10. Click Create Request.
11. Under New Escrow Group card, tick Sign to sign the group certificate.
12. Enter your password in the top right panel.
13. Click Sign all.
14. Select the signed escrow group card in the top right panel.
15. In the pop-up, click Export to download it locally.
16. Send the signed escrow group file to a Super-Admin.

To Super-Admin

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Escrow section.
3. Click the Escrow Certificates in the left panel.
4. Click the Execute signed certificates button in the top right panel.
5. In the pop-up, click Browse Files.
6. Select the escrow certificate file from your local machine and click Open.
7. To execute, click Apply.

Deleting an Existing Escrow Group

To Site-key Admin

1. Open Connect Application.
2. Select your deployment card.
3. In the login window, select Site-key category.
4. Click Load key in the login page.
5. Open your site-key file from your local machine.
6. Enter your account password.
7. Click Login.
8. In the site-key dashboard, click the Add escrow group button in the top left.
9. In the pop-up, enter the escrow group name.
10. Click Create Request.
11. Under New Escrow Group card, tick Sign to sign the group certificate.
12. Enter your password in the top right panel.
13. Click Sign all.
14. Select the signed escrow group card in the top right panel.
15. In the pop-up, click Export to download it locally.
16. Send the signed escrow group file to a Super-Admin.

To Super-Admin

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Escrow section.
3. Click the Escrow Certificates in the left panel.
4. Click the Execute signed certificates button in the top right panel.
5. In the pop-up, click Browse Files.
6. Select the escrow certificate file from your local machine and click Open.
7. To execute, click Apply.