diff --git a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md index 7782035..bd2e3bf 100644 --- a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md +++ b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md @@ -32,7 +32,9 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor 1. Run the command to generate new entropy and shard it to quorum of public certificates of the input shardfile: - * `keyfork mnemonic generate --size 256 --shard-to ,output=` + * Replace the values: , + + * `keyfork wizard generate-shard-secret --shard-to shardfile.asc --output shardfile.new.asc --cert-output keyring.new.asc --derive-openpgp-cert encryption_cert.new.asc,userid=` TODO: NOT IMPLEMENTED 1. Unseal an SD card pack @@ -40,23 +42,27 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor 1. Place all unsealed SD cards into High Visibility Storage -1. Back up the `` to any desired number of SD cards, and label each "Shardfile [unique_name] [date]" +1. Back up the newly generated artifacts to any desired number of SD cards, and label each "Shardfile [unique_name] [date]" 1. `lsblk` to find media name - 1. `cp /media/` + 1. Back up the output shardfile: + * `cp shardfile.new.asc /media//` + + 1. Back up the new keyring file: + + * `cp keyring.new.asc /media//` + + 1. Back up the root PGP certificate: + * `cp root_pgp_cert.asc /media//` 1. Each backup should be placed into High Visibility Storage after it's made - + 1. Label the SD card "Shardfile [date] [namespace]" -1. Unplug the SD card and place it in High Visibility Storage - -1. Label the SD card "Shardfile \[date\] \[namespace\]" +1. Upload the newly generated artifacts into the ceremonies repository 1. Gather all the original items that were in the air-gapped bundle: @@ -65,3 +71,4 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor * AirgapOS SD card {{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}} + diff --git a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md index caa3ba0..889c66f 100644 --- a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md +++ b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md @@ -32,7 +32,11 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key 1. Run the relevant keyfork wizard to perform the ceremony: - * `keyfork wizard generate-shard-secret --threshold --max --keys-per-shard= --output shardfile.asc --cert-output keyring.asc` + * Replace the following values: , , , + + + * `keyfork wizard generate-shard-secret --threshold --max --keys-per-shard= --output shardfile.asc --cert-output keyring.asc --derive-openpgp-cert encryption_cert.asc,userid=` TODO: NOT IMPLEMENTED + 1. Unseal an SD card pack @@ -44,24 +48,24 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key 1. Find media name using `lsblk` + 1. Back up the root OpenPGP certificate + + * `cp encryption_cert.asc /media//` + 1. Back up the `shardfile.asc` - * `cp shardfile.asc /media/` + * `cp shardfile.asc /media//` 1. Back up the `keyring.asc` - * `cp keyring.asc /media/` - - + * `cp keyring.asc /media//` 1. Unplug the SD card and place it in High Visibility Storage 1. Label the SD card "Shardfile [date]" +1. Upload the newly generated artifacts into the ceremonies repository + 1. Gather all the original items that were in the air-gapped bundle: * Air-gapped computer diff --git a/quorum-vault-system/src/generated-documents/level-2/operator-requirements.md b/quorum-vault-system/src/generated-documents/level-2/operator-requirements.md index 36685cb..d07693d 100644 --- a/quorum-vault-system/src/generated-documents/level-2/operator-requirements.md +++ b/quorum-vault-system/src/generated-documents/level-2/operator-requirements.md @@ -4,7 +4,6 @@ ## For Quorum Based Operations // ANCHOR: requirements - * [Air-gapped bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md) * Minimum of 2 [Operators](/system-roles.md#operator)