remove old commands which are replaced by mini-quorum
This commit is contained in:
parent
2f9dd52d54
commit
a41d9d7917
|
@ -50,30 +50,6 @@
|
||||||
|
|
||||||
1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
|
1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
|
||||||
|
|
||||||
1. Verify keyring data from the Ceremony SD card:
|
|
||||||
|
|
||||||
1. Import keys into the system
|
|
||||||
|
|
||||||
* `gpg --import keys/all/*.asc`
|
|
||||||
|
|
||||||
1. Plug in the operator's smartcard, and ensure it is loaded:
|
|
||||||
|
|
||||||
* `gpg --card-status`
|
|
||||||
|
|
||||||
1. Print the list of trusted keys:
|
|
||||||
|
|
||||||
* `sq-wot --gpg list`
|
|
||||||
|
|
||||||
1. Repeat for every operator, ensuring all keys are cross-trusted.
|
|
||||||
|
|
||||||
1. Terminate `gpg-agent`: `killall gpg-agent`
|
|
||||||
|
|
||||||
1. Verify all signatures for the workflow data:
|
|
||||||
|
|
||||||
* `for file in <payload.json>.*.sig; do echo "Verifying: $file"; gpg --verify "${file}" "<payload.json>"; done`
|
|
||||||
|
|
||||||
* Ensure that the script doesn't output any "WARNING" messages to the console. If it does, abort the ceremony and initiate incident response.
|
|
||||||
|
|
||||||
1. Start Keyfork using the relevant Shardfile:
|
1. Start Keyfork using the relevant Shardfile:
|
||||||
|
|
||||||
* `keyfork recover shard --daemon /media/external/shard.asc`
|
* `keyfork recover shard --daemon /media/external/shard.asc`
|
||||||
|
|
Loading…
Reference in New Issue