Key Recovery ProcessChapter 22 Setting Up Key Archival and Recovery 7495. In the New Scheme section, make the appropriate changes:Number of recovery agents required. Type the number of agents required toauthorize a key recovery process. The number cannot be zero and must beequal to or less than the total number of recovery agents.Total number of recovery agents. Specify the total number of key recoveryagents. The number cannot be less than one and must be equal to or greaterthan the number of agents required to authorize the key recovery operation.6. Click Next.7. For each agent, enter a user name and password, then click Next.The number of screens depends on the total number of agents you havespecified.8. When you have entered all agent information, click Finish.You are returned to the Scheme Management tab.Changing Key Recovery Agents’ PasswordsAs administrator, you have the responsibility of safeguarding the security of eachData Recovery Manager installed in your PKI setup. One of the safety measuresyou can implement is to ask your key recovery agents to change their passwordsperiodically. This way, you will be sure that the required number of agents areavailable if a key needs to be recovered. If key recovery agents routinely changetheir passwords, they are less likely to forget them.The CMS window allows you to view the list of currently designated key recoveragents and, if necessary, change an agent’s password.To change key recovery agents’ passwords:1. Access the CMS window (see “Logging In to the CMS Window” on page 343).2. Click the Configuration tab.3. In the navigation tree, select the Data Recovery Manager, and in the right pane,click the Recovery Agent Password tab.
