Disaster Recovery Practices
Disasters, such as hard disk failure or a compromised CA certificate, can disrupt certificate services. You can take various steps to minimize the impact of such disasters and to ensure timely recovery from server or network disasters. The following practices can reduce the risk of failed or compromised CAs:
Using preventive practices for servers.
Providing security for certification authority servers.
Protecting private keys for certification authority servers.
Developing recovery plans.