Key ceremony
A formal, documented procedure for generating keys so that no single person can control them.
Generating a root key for a certificate authority or an HSM follows a formal procedure: several independent participants, logged steps, controlled rooms and often video. The aim is that nobody can quietly read, copy or replace the key. Secrets are split into shares held by different people, so using the key requires a quorum.
ICANN runs public ceremonies for the DNSSEC root key, with trusted community representatives handling smart cards and hardware modules. It looks theatrical. Given what a stolen root key would break, the theatre is cheap insurance.