Key Ceremony

A key ceremony is the scripted, witnessed procedure by which an organisation generates the keys that will control its most valuable assets, performed once and documented so that everyone can later say how the key came into existence. The elements are consistent across custodians: a prepared script agreed in advance, hardware that is inspected and wiped before use, a room without networks or personal devices, multiple participants who each contribute or receive only a part, a record of who was present and what each step produced, and often a recording or an independent observer. The purpose is not secrecy theatre. It is to make two claims checkable afterwards — that no single person ever saw enough material to reconstruct the key, and that the key was generated on equipment nobody had prepared in advance — because both are impossible to establish retrospectively if the generation happened at somebody's desk. The ceremony is also where the recovery procedure is first exercised, since a key nobody can restore is a loss waiting for a date.