Zero-Knowledge Enclave Setup: Deploying Enterprise Master Identity Keys

A complete technical guide on initializing tenant Argon2id master identity keys, deriving client-side document enclaves, and distributing sovereign credentials.

Security Engineering Guild
10 min read
Zero-Knowledge Enclave Setup: Deploying Enterprise Master Identity Keys

This guide outlines the mathematical foundation and deployment procedure for initializing Foxcolab enterprise cryptographic enclaves. Follow these steps to ensure end-to-end zero-knowledge protection across your organization.

  1. Step 1: Generate Master Identity Key (MIK)

    Launch the client onboarding setup. Your browser or native client derives the 256-bit Master Identity Key locally using Argon2id with 64MB memory cost and 4 parallel lanes.

  2. Step 2: Backup the 24-Word Recovery Phrase

    Record the offline BIP-39 recovery words on physical security cards or within a certified hardware enclave. Foxcolab servers possess zero ability to recover lost keys.

  3. Step 3: Enforce Hardware FIDO2 Security Keys

    Configure your organization policy to require WebAuthn / YubiKey hardware tokens for all administrative policy operations and session rotations.

Critical Security Boundary: Never enter your 24-word recovery phrase into any web browser outside the verified client enclave URL.
Security Engineering Guild
Written by
Security Engineering Guild
Zero-Knowledge Architecture

Foxcolab solutions and security engineers who deploy and support the platform.

Zero-knowledge collaboration

Private workspace tools, engineered without backdoors.

End-to-end encrypted mail, drive, documents and meetings in one workspace.