The retention of the private component of the key pair associated with a subscriber’s encryption certificate to support key recovery.
Sources:
CNSSI 4009-2015
from
CNSSI 1300