Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 56 / 874

Deployment Scenarios
56 Netscape Certificate Management System Administrator’s Guide • June 2003
Figure 1-3 Certificate Manager and Data Recovery Manager in different instances
The Data Recovery Manager is intended for archival and recovery of private
encryption keys only. Therefore end entities must be using either a browser that
supports dual-key generation or a browser that is using Netscape Personal Security
Manager, which supports dual keys. When determining the location of a Data
Recovery Manager, be sure to look into firewall considerations, the physical
security required for each subsystem, and the physical location of the Certificate
Manager agent, Data Recovery Manager agent, and other persons responsible for
administering the Certificate Manager and recovering keys.
Like a Certificate Manager, a Data Recovery Manager has special physical security
requirements, since a compromised Data Recovery Manager would have
devastating security consequences for your entire PKI. You may therefore want to
keep the Data Recovery Manager in a special locked room or building, a choice that
can affect your deployment strategy.