Disable a Key Escrow UserΒΆ

It is possible to disable a Key Escrow User. If disabled, the Key Escrow User will not receive any new or updated vault keys, and it will not be possible to recover data from new or updated vaults. Use with caution.

WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING

Use EXTREME caution when disabling Key Escrow Users.

If the last Key Escrow Users is disabled, data recovery (escrow) will not be possible.

Any vaults created or modified will NOT be recoverable by the disabled Key Escrow User.
If your organization relies on being able to recover data, do not disable a Key Escrow User
unless you have created and enabled a new Key Escrow User before.

WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING

What Key Escrow User should be DISABLED?

1) User: "escrow2@stored.safe" (UID: 165495448749091Ae68Lp), Name: "StoredSafe Escrow #2"
2) User: "escrow3@stored.safe" (UID: 16550611910582YAdyScX), Name: "StoredSafe Escrow #3"
3) User: "escrow4@stored.safe" (UID: 165507759456004K3a8ML), Name: "StoredSafe Escrow #4"

Select either by using Index Number or by the unique User-ID. Default is <User-ID>.
Index # or User-ID of User? (Q to quit, L to list) <165507759456004K3a8ML>: 3
[Using UUID: "165507759456004K3a8ML"]

Login:               escrow4@stored.safe
User-ID (UID):       165507759456004K3a8ML
Fullname:            StoredSafe Escrow #4
Email:               escrow4@stored.safe
Yubikey clientid:    YxTjkGahWTXJ
PGP Fingerprint:     93AE4BD7588BC1DC959D7848AD4F2FA94F3DB99A
Capabilities:        148 (Administrator, Escrow user, Active)

INFO: Key Escrow user, list all vaults? (Might be excessive) (y/<N>): N
DISABLE the Key Escrow User "StoredSafe Escrow #4" (UID: 165507759456004K3a8ML) (y/<N>): y
Are you ABSOLUTELY sure? (y/<N>): y
INFO: The Key Escrow User "StoredSafe Escrow #4" (UID: 165507759456004K3a8ML) has been DISABLED.

(Press any key to continue)