Quorum Control Policy

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • The Quorum Control Policy specifies the minimum number of approvals required among the total number of selected approvers to reach quorum for customer managed key withdrawal.

    Warning:
    You must sign a legal addendum to activate the key withdrawal functionality. The Quorum Control Policy Settings option becomes available when the withdrawal feature is enabled, otherwise the module isn’t visible on the app menu. After key withdrawal, your instance is no longer available until the encryption key is resupplied and is active again.

    In certain circumstances, you may want to create a key withdrawal. You must first request the key withdrawal functionality from Customer Service and Support.

    The Quorum Control Policy specifies the minimum number of approvals required among the total number of selected approvers to reach quorum for customer managed key withdrawal. For instance, there are a total of five approvers, but only four approvals are required to reach quorum. When four approvals are obtained, the withdrawal request is processed and the key withdrawn.

    Whenever a withdrawal operation is performed in a group enabled for quorum approval, a workflow for quorum approval is triggered. An email notification is sent to all users who can grant approval. Tasks are also generated in the approvers’ accounts, which they see on the dashboard when they log in to their ServiceNow account.

    The users can grant approvals from the Instance, the email, or the Key Management Operations page. The key withdrawal operation is blocked until the quorum is met.

    Once the minimum number of approvers is reached, quorum is reached and the key withdrawal will trigger. The withdrawal is performed and is logged, including the names of users who approved the request.

    See Configure Quorum Control Policy Settings for setup details.