Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

An auditor recommends: We recommend that PGP environment be re-keyed using the industry required (ISO x9.8 and x9.24) standards of “split-knowledge and dual control”

Is there something that we're missing?: this would require encrypted files to be decrypted with two people each time the key is accessed/loaded.

Are there use cases with PGP keys that this makes sense?

share|improve this question
up vote 0 down vote accepted

If you have a company key that was used to sign people's individual keys, yes, it should be password protected and the password divided to at least two people. Individual keys should also be password protected, but split-knowledge is not necessary or recommended for most purposes.

share|improve this answer
I agree, the only use cases we can think of are long term encryption items like backups. But that would use a different key rather than the same one used for an individual's email. – Leo Sep 10 '10 at 15:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.