yes, it is a server with a hardware firewall tat blocks any connection except outgoing ones, the private keys are encrypted and backed up hourly on a separate backup server over LAN, and the backup server has no internet connection at all (internal network only), all the system runs under an...