BitLocker encryption has been implemented for all the Windows-based computers in an organization. You are concerned that someone might lose their cryptographic key. Therefore, a mechanism was…

Key archival refers to the long-term storage of expired or retired keys for the purpose of decrypting old data, not for recovering lost active keys from a trusted third party.

Certificate rollover is the process of replacing an expiring digital certificate with a new one before it expires, which is unrelated to storing or recovering cryptographic keys.

Key escrow is the cryptographic mechanism where a copy of a cryptographic key is held in trust by a third party (in this case, Active Directory) so that it can be retrieved if the original key is lost. BitLocker's Active Directory backup feature works on this principle - the recovery key is stored with a trusted authority (AD) that can release it under authorized circumstances, matching the exact definition of key escrow.

Key renewal refers to extending the validity period or regenerating a cryptographic key upon expiration, which is a lifecycle management function and not a recovery mechanism.