Custody and key management

Key ceremony

A key ceremony is the formal, witnessed, and documented procedure in which cryptographic keys are generated, split, backed up, or restored. Conducted under multi-person control inside certified hardware, it produces the audit evidence regulators and auditors require to trust the root of a custody system.

What an audited key ceremony involves

Participants with separated roles execute a scripted procedure: HSM initialization, key generation inside the hardware boundary, backup share distribution to independent custodians, and signed minutes of every step. No single person can complete the ceremony alone.

Key ceremonies for Taurus-PROTECT deployments are run by Taurus consulting and IT partners, aligned with the CMTA Digital Assets Custody Standard, and banks deploying on-premises conduct ceremonies inside their own infrastructure, keeping sovereignty end to end.

Key ceremony, explained

How often are key ceremonies performed?
At initial deployment, when adding or rotating root keys, when restoring from backup, and when decommissioning. Each occurrence is witnessed, minuted, and auditable, typically as part of ISAE 3402 controls.

Talk to our experts →

Custody and key management

Key ceremony

A key ceremony is the formal, witnessed, and documented procedure in which cryptographic keys are generated, split, backed up, or restored. Conducted under multi-person control inside certified hardware, it produces the audit evidence regulators and auditors require to trust the root of a custody system.

What an audited key ceremony involves

Participants with separated roles execute a scripted procedure: HSM initialization, key generation inside the hardware boundary, backup share distribution to independent custodians, and signed minutes of every step. No single person can complete the ceremony alone.

Key ceremonies for Taurus-PROTECT deployments are run by Taurus consulting and IT partners, aligned with the CMTA Digital Assets Custody Standard, and banks deploying on-premises conduct ceremonies inside their own infrastructure, keeping sovereignty end to end.

Key ceremony, explained

How often are key ceremonies performed?
At initial deployment, when adding or rotating root keys, when restoring from backup, and when decommissioning. Each occurrence is witnessed, minuted, and auditable, typically as part of ISAE 3402 controls.

Talk to our experts →

Brand

Custody and key management

Key ceremony

A key ceremony is the formal, witnessed, and documented procedure in which cryptographic keys are generated, split, backed up, or restored. Conducted under multi-person control inside certified hardware, it produces the audit evidence regulators and auditors require to trust the root of a custody system.

What an audited key ceremony involves

Participants with separated roles execute a scripted procedure: HSM initialization, key generation inside the hardware boundary, backup share distribution to independent custodians, and signed minutes of every step. No single person can complete the ceremony alone.

Key ceremonies for Taurus-PROTECT deployments are run by Taurus consulting and IT partners, aligned with the CMTA Digital Assets Custody Standard, and banks deploying on-premises conduct ceremonies inside their own infrastructure, keeping sovereignty end to end.

Key ceremony, explained

How often are key ceremonies performed?
At initial deployment, when adding or rotating root keys, when restoring from backup, and when decommissioning. Each occurrence is witnessed, minuted, and auditable, typically as part of ISAE 3402 controls.

Talk to our experts →

Brand

Custody and key management

Key ceremony

A key ceremony is the formal, witnessed, and documented procedure in which cryptographic keys are generated, split, backed up, or restored. Conducted under multi-person control inside certified hardware, it produces the audit evidence regulators and auditors require to trust the root of a custody system.

What an audited key ceremony involves

Participants with separated roles execute a scripted procedure: HSM initialization, key generation inside the hardware boundary, backup share distribution to independent custodians, and signed minutes of every step. No single person can complete the ceremony alone.

Key ceremonies for Taurus-PROTECT deployments are run by Taurus consulting and IT partners, aligned with the CMTA Digital Assets Custody Standard, and banks deploying on-premises conduct ceremonies inside their own infrastructure, keeping sovereignty end to end.

Key ceremony, explained

How often are key ceremonies performed?
At initial deployment, when adding or rotating root keys, when restoring from backup, and when decommissioning. Each occurrence is witnessed, minuted, and auditable, typically as part of ISAE 3402 controls.

Talk to our experts →