...

The passphrase to the Root CA private keys is known to the Service Owner (M. Milinovic) and S. Winter (DevOps team). Both of these have no access to the physical storage of the key file.

VM snapshot restore procedure 

1. eduroam-OT sends a request to the GEANT IT Support <support@it.geant.org>, to restore a specific machine, from a given date,

      1-a If the restore is urgent (which IMHO will always be the case), CC qaiser and Allen to the email, and note "URGENT" in subject of the message

      1-b In this message eduroam-OT states if they want that the:

          1-b-1 restored snapshot replace the existing VM, or

          1-b-2 restored snapshot to be separately accessible so that they can manually retrieve the needed information

2. GEANT IT restores the VM as per request, detailed in 1-b.

          2-a The restore time is not guaranteed, and the GEANT IT is not 24/7. For urgent ones follow 1-a !!

3. GEANT IT confirms to the eduroam-OT that the restore was complete

4. eduroam-OT confirms that the restore was successful and optionally informs in case of 1-b-2, if the restored VM is no longer needed

5. restore request is closed.