The private keys of the DutchGrid medium-security Certification Authority are only available in encrypted form on media stored in a secure location. The machine used to activate the private key is not accessible via any network. If the machine and/or the media are lost, this will be handled as a major compromise that implies generating a new key pair and terminating all services associated with the lost key pair.
If the hardware or software of the ca activation machine become corrupt, the status will be diagnosed and suitably repaired. If there is any doubt about the extent of the damage involved, this will imply rebuilding the machine from scratch, using original supplied parts and software distributions.
If data becomes corrupted, the cause will be diagnosed and the data restored from the latest back-up.