IT Admin Operations

Escrow & Key Management

Manage your organization's root cryptographic identity. Operations here affect the verifiability of all previously issued enterprise credentials.

Current KMS Status

Active Key ID

key-prod-2026-v4.a1b2c3d4

Algorithm

ECDSA secp256k1

Last Rotated

14 months ago

Rotation History

2025-04-12key-prod-2026-v4

2024-01-05key-prod-2024-v3

Rotate Organization Key

Generating a new organization key will immediately set it as the default signing key for all new credentials. The old key will be transitioned to verification-only mode in the Escrow vault.

DANGER: Permanent Cryptographic OperationIf the old key is ever fully revoked from Escrow, all historical documents signed by it will fail verification mathematically. Proceed only if authorized by the Chief Information Security Officer (CISO).