HSM Key Management Ceremony

Split-component ceremony to HSM injection, key hierarchy, PIN translation, and scheduled rotation

HSM Key Management Ceremony Split-component ceremony to HSM injection, key hierarchy, PIN translation, and scheduled rotation 01 / Custody & Ceremony 02 / HSM 03 / Key Hierarchy 04 / Operations 05 / Lifecycle Components · custodian shares · Custody & Ceremony Components custodian shares Key Ceremony · dual control · Custody & Ceremony · no single custodian Key Ceremony dual control no single custodian HSM Inject · combine shares · HSM HSM Inject combine shares LMK · local master key · HSM · never exported LMK local master key never exported ZMK · zone master key · Key Hierarchy ZMK zone master key Working Keys · ZPK / TPK · Key Hierarchy Working Keys ZPK / TPK PIN Translate · under ZPK · Operations PIN Translate under ZPK Rotation · scheduled re-key · Lifecycle Rotation scheduled re-key translate schedule Legend User UI Agent logic Policy Tool action Context / trace

Ceremony Controls

  • • Key split into custodian components
  • • Dual control: no one holds a full key
  • • Components combined only inside the HSM

Key Hierarchy

  • • LMK never leaves the HSM boundary
  • • ZMK protects keys exchanged between zones
  • • Working keys (ZPK/TPK) do the live crypto

Workflow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • T theme • E export