public
/
docs
5
0
Fork 0
Code Issues 8 Pull Requests 1 Packages Projects Releases Wiki Activity

fix commands which used --derive-openpgp-cert which isn't implemented

This commit is contained in:
Anton Livaja 2025-02-11 02:07:52 -05:00
parent 7cb4cdd1a0
commit 6537012e9e
Signed by: anton
GPG Key ID: 44A86CFF1FDF0E85
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md
View File

@ -22,7 +22,9 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor
* Replace the values: <path_to_input_shard>, <pgp_cert_id> * Replace the values: <path_to_input_shard>, <pgp_cert_id>
* `keyfork wizard generate-shard-secret --shard-to shardfile.asc --output shardfile.new.asc --cert-output keyring.new.asc --derive-openpgp-cert encryption_cert.new.asc,userid=<user_id>` TODO: NOT IMPLEMENTED * `keyfork wizard generate-shard-secret --shard-to shardfile.asc --output shardfile.new.asc --cert-output keyring.new.asc`
* TODO - NOT IMPLEMENTED: `--derive-openpgp-cert encryption_cert.new.asc,userid=<user_id>`
1. Unseal an SD card pack 1. Unseal an SD card pack
@ -45,8 +47,9 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor
* `cp keyring.new.asc /media/vaults/<namespace>/keyring.asc` * `cp keyring.new.asc /media/vaults/<namespace>/keyring.asc`
1. Back up the root PGP certificate: 1. TODO: NOT IMPLEMENTED
* `cp root_pgp_cert.asc /media/vaults/<namespace>/` * Back up the root PGP certificate:
* `cp encryption_cert.new.asc /media/vaults/<namespace>/`
1. Each backup should be placed into High Visibility Storage after it's made 1. Each backup should be placed into High Visibility Storage after it's made

5
quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md
View File

@ -21,7 +21,10 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key
* Replace the following values: <M>, <N>, <number_of_smart_cards_per_operator>, <pgp_cert_id> * Replace the following values: <M>, <N>, <number_of_smart_cards_per_operator>, <pgp_cert_id>
* `keyfork wizard generate-shard-secret --threshold <M> --max <N> --keys-per-shard=<number_of_smartcards_per_operator> --output shardfile.asc --cert-output keyring.asc --derive-openpgp-cert encryption_cert.asc,userid=<pgp_cert_id>` TODO: NOT IMPLEMENTED * `keyfork wizard generate-shard-secret --threshold <M> --max <N> --keys-per-shard=<number_of_smartcards_per_operator> --output shardfile.asc --cert-output keyring.asc`
* TODO - NOT IMPLEMENTED:
`--derive-openpgp-cert encryption_cert.asc,userid=<pgp_cert_id>`
1. Unseal an SD card pack 1. Unseal an SD card pack