public
/
docs
5
0
Fork 0
Code Issues 5 Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: public:9f8297bd0ec3a01ae0fd62f4fa74143b253b8b12
Branches Tags
public:main
public:feat/quorum-kms
..
compare: public:230851330975ffbbb07e2306cab2c71695abb465
Branches Tags
public:main
public:feat/quorum-kms

2 Commits
9f8297bd0e ... 2308513309

Author SHA1 Message Date
Anton Livaja 2308513309
fix: add note about setting system time 2024-08-04 20:14:42 -04:00
Anton Livaja 65d0e0269d
fix: update paths in ceremony.sh script for hybrid ceremony 2024-08-04 20:14:23 -04:00
2 changed files with 6 additions and 1 deletions
Show Stats Expand all files Collapse all files

5
quorum-key-management/src/hybrid-key-provisioning.md
View File

@ -63,6 +63,11 @@ don't. More notes on selecting hardware can be found [here](one-time-use-hardwar
9. Button mash to ensure adequate entropy on the OS 9. Button mash to ensure adequate entropy on the OS
10. Set the system time as it has to be after the PGP
public certificates were created, and before they expire:
* `date -s "YYYY-MM-DD HH:MM:SS"`
10. Run `ceremony.sh` 10. Run `ceremony.sh`
11. Back up the `shardfile`, and `pub.asc` to 3 separate SD cards, 11. Back up the `shardfile`, and `pub.asc` to 3 separate SD cards,

2
quorum-key-management/src/one-time-repository-setup.md
View File

@ -37,7 +37,7 @@ command with a desired threshold:
exit 1 exit 1
fi fi
keyfork wizard bottoms-up --threshold 2 --output-cert /dev/null --output-shardfile /dev/null --user-id "Distrust Key Ceremony" public-certificates/ keyfork wizard bottoms-up --threshold 2 --output-cert /media/cert --output-shardfile /media/shardfile --user-id "Distrust Key Ceremony" public-certificates/
``` ```
* The `airgap.iso` which is to be used during the ceremony * The `airgap.iso` which is to be used during the ceremony