BitLocker encryption has been implemented for all the Windows-based computers in an organization. You are concerned that someone might lose their cryptographic key. Therefore, a mechanism was…

Key archival refers to the long-term storage of cryptographic keys, often for compliance, but 'key escrow' specifically focuses on the mechanism for *recovery* of lost keys.

Key escrow is a cryptographic system in which the keys needed to decrypt encrypted data are held in safekeeping by a trusted third party, such as an organization's IT department or Active Directory, for recovery purposes. This ensures that encrypted data can still be accessed even if the original key is lost or unavailable, which is crucial for BitLocker deployment in an enterprise.

Certificate rollover is the process of replacing an expiring digital certificate, which is related to public key infrastructure, not the secure storage and recovery of symmetric encryption keys like BitLocker keys.

Key renewal is the process of extending the validity period of an existing key or generating a new key, similar to certificate rollover, but not the storage for recovery.