The private keys of the DutchGrid medium-security Certification Authority are backup up on encrypted removable magnetic media, stored in a securely controlled environment.