Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • A recovery group is not assigned to a user in an organization or an individual

  • Multi-tenancy is in effect

  • An approval group was not properly applied as a recovery groupFailure in application process

Recovery Group unassigned

...

Note: it is advised to retain multi-tenancy on a shared computer.

...

Failure in Application Process

To set up a Recovery Group, the assignee’s private key is broken into fragments or shards, with each shard assigned to a member of the group. These shards are encrypted and kept on the server. When a user needs to recover their account, each of the required approvers retrieves their encrypted shard from the server, decrypts it using the approver’s private key, and sends the decrypted shard securely to the user that is recovering.

...

It is important that the assignee and members of the group are online with PreVeil software running properly for the process to complete. The process happens automatically when users are online, and no actions are required on their part. If users are not online or have properly running software, within a two-week period, then the recovery group application will fail as timeframe to complete key fragmentation will have expired.

Administrators of PreVeil organization are sent weekly Health Check Emails to inform of users who have an invalid or missing recovery group configuration and how to resolve it.