WEBVTT

00:00:00.400 --> 00:00:03.732
This lesson covers specialist review workspaces.

00:00:04.012 --> 00:00:04.825
Step one.

00:00:05.105 --> 00:00:07.160
Open HSM assurance.

00:00:07.440 --> 00:00:15.857
Review owner, firmware, dual-control and backup-test metadata, then open device evidence for the associated rule
outcomes.

00:00:16.137 --> 00:00:20.909
Synthetic vendor examples are not native integrations or health measurements.

00:00:22.000 --> 00:00:22.871
Step two.

00:00:23.151 --> 00:00:25.879
Scroll to the ceremony custody template.

00:00:26.159 --> 00:00:32.614
It represents three primary cards and three backup cards across three custodians.

00:00:32.894 --> 00:00:35.901
The authorization threshold remains unknown.

00:00:36.181 --> 00:00:42.915
Do not infer a quorum, copy card contents or use this template as vendor ceremony instructions.

00:00:44.000 --> 00:00:45.010
Step three.

00:00:45.290 --> 00:00:46.706
Open Payment review.

00:00:46.986 --> 00:00:55.601
Inspect the explicitly synthetic merchant, controlled-service and external-party trust boundaries, along with
stored service findings.

00:00:55.881 --> 00:01:02.092
This view does not process transactions, detokenize data or provide a PCI attestation.

00:01:03.200 --> 00:01:04.129
Step four.

00:01:04.409 --> 00:01:11.886
In a private local installation, select Import evidence and choose one public PEM or DER certificate.

00:01:12.166 --> 00:01:16.264
This recording uses only the supplied public synthetic certificate.

00:01:16.544 --> 00:01:19.597
Shared demo mode rejects certificate imports.

00:01:19.877 --> 00:01:23.407
Never upload a private-key file or certificate bundle.

00:01:24.533 --> 00:01:25.450
Step five.

00:01:25.730 --> 00:01:27.054
Open Certificates.

00:01:27.334 --> 00:01:33.684
Inspect issuer, declared public-key algorithm, encoded expiry and evidence status.

00:01:33.964 --> 00:01:36.495
Use the filter to find a certificate.

00:01:36.775 --> 00:01:42.696
The renewal window is configurable in CAS metadata policy; the default is thirty days.

00:01:43.800 --> 00:01:44.775
Step six.

00:01:45.055 --> 00:01:48.329
Click the certificate and inspect its rule results.

00:01:48.609 --> 00:01:54.310
An encoded-validity pass proves neither trust-chain validity nor endpoint deployment.

00:01:54.590 --> 00:01:59.594
RSA is flagged for quantum exposure even when a certificate has not expired.

00:01:59.874 --> 00:02:04.297
Chain, revocation and interoperability remain unverified.

00:02:05.400 --> 00:02:06.375
Step seven.

00:02:06.655 --> 00:02:10.324
Return to Overview and export the certificate assessment.

00:02:10.604 --> 00:02:15.178
Route evidence gaps and remediation proposals to the responsible owner.

00:02:15.458 --> 00:02:25.675
Use the setup guide for private deployment and backups; these videos cover console use, not production
accreditation or device-changing commands.