Site-key Scenarios
Various escrow scenarios may occur that involve the Site-key admin and a Super-admin.
Create escrow groups
To create an escrow group:
The Site-key admin must log in, and select the
Group
icon located at the top right side of the screen.A modal appears that prompts the user to give the new group a
name
.Once the user clicks , the request will appear in the dashboard.
- If the user would like to edit the request, they can do so by clicking the blue button located at the bottom left of the request.
- If the user would like to completely delete the request, they can do so by clicking the red button.
To continue with the request, the user must sign it by checking the
Sign
box on the bottom right, and then entering theirpassword
.Next, the user must export the certificate by selecting the
Export certificate
button to the right of the Signed Certificates heading.A modal appears that prompts the user to name the exported version of the request then the user must click .
Next, the user must email the downloaded request file to a super-admin in the system.
From there, a super admin must log in to the tiCrypt interface by going to the tab, and navigating to the
Signed Escrow Actions
.From there, the user must select the
Plus
icon located at the top right side of the screen and drag in the requested file that was emailed to them by the site-key admin.Once dropped, the super admin must sign by clicking the check box, and click
Delete escrow user
To delete an escrow user from the system:
The super-admin must navigate to the
Escrow Users
in the tab.They must select the specified escrow user then click the
Create deletion request
button located in the top right panel.A request file will immediately begin to download. The super-admin must email this file to the site-key admin.
The site-key admin must log in to the site-key interface and drag the file that was sent to them by the super-admin into the dashboard.
Next, the site-key admin must select it, sign it by putting it their
password
, and export the signed certificate.The site-key admin must send this
signed certificate
back to the super-admin so that the super-admin can upload the certificate intoSigned Escrow Actions
located in the tab.From there, the user must select the
Plus
icon located at the top right side of the screen and drag in therequest file
that was emailed to them by the site-key admin.Once dropped, the super admin must sign by checking the
Sign
box, and then clicking .
Reassign the site-key
It is not common nor encouraged to change the site-key admin unless the site-key password is lost. In the case that it is a necessity, a user must go through the same steps that they take to register as a site-key admin. They must send the public key
to Tera Insights so we can sign off on it.