# Backup, recovery, and key rotation

Use this page to route vault operators to the correct backup, recovery, or wrapping-key-rotation guidance.

Vault backup and recovery depends on the vault's key-management model. HSM-backed vaults, MPC-backed vaults, and cold vault workflows have different operational procedures and different recovery materials.

## Where to go

| Need | Start with |
|  --- | --- |
| Rotate a vault wrapping key for an IBM HSM-backed vault | [IBM HSM wrapping key rotation](/products/custody/v1.36/identity-and-access/vault-management/vault-wrapping-key-rotation-ibm-hsm) |
| Rotate a vault wrapping key for an MPC-backed vault | [MPC wrapping key rotation](/products/custody/v1.36/identity-and-access/vault-management/vault-wrapping-key-rotation-mpc) |
| Recover cold-vault operations after a workstation or environment failure | [Cold vault recovery](/products/custody/v1.36/identity-and-access/vault-management/cold-vault-recovery) |


For key strategy context, see [Vaults](/products/custody/v1.36/identity-and-access/vault-management#key-strategies-and-backup-implications). For KMS setup guidance, see [Integrate a KMS](/products/custody/v1.36/deployment/integrate-kms/overview).