What Is a PKI Key Ceremony?
A key ceremony is the formal, witnessed procedure in which a certificate authority’s root or issuing CA keys are generated inside an HSM. Because everything issued by the CA inherits trust from that moment, the ceremony is scripted, witnessed, recorded and auditable. This guide covers what happens and how to prepare.
Why ceremonies are formal
The root key is the single point of trust for the whole PKI. Auditors (for example under WebTrust or ETSI requirements) must be able to verify that the key was generated in a genuine HSM, that no single person could extract or misuse it, and that every step followed the script. Hence: named roles, split knowledge, dual control and a signed record of every action.
Who takes part
A typical ceremony involves a ceremony administrator running the script, key custodians each holding part of the activation material (smart cards or key shares), a witness or auditor, and often a recording operator. No single participant can activate the key alone — that separation is the point.
The script and the evidence
Everything follows a pre-approved, step-by-step script: identity checks, HSM initialization, key generation, backup of key shares to separate safes, and sign-off sheets for every participant. HSM key attestation adds cryptographic proof that the keys were generated in hardware — verifiable afterwards by anyone with the attestation files.
Generate a complete, customizable ceremony script — roles, participants, steps and sign-off sheets — in your browser.
Open the Key Ceremony Planner →Frequently asked questions
How long does a key ceremony take?
Plan half a day to a full day for a root ceremony, including identity verification, HSM setup, generation, backups and signatures. Rushing a ceremony is how steps get skipped and audits get failed.
What is HSM key attestation?
A signed statement from the HSM proving a key was generated inside genuine, certified hardware and is non-exportable. Auditors can verify the attestation chain against the vendor’s root certificates.
Do I need a ceremony for an issuing CA too?
Yes — any CA key that anchors trust should be generated under the same controls, though issuing-CA ceremonies are often shorter because the root already exists to sign the new certificate.
Need help beyond the tools? MI Support IT provides enterprise PKI consulting — ADCS, Venafi automation, key ceremonies and CP/CPS documentation.