Across all industries the requirements for managing cryptographic keys are becoming ever-more complex.  Ensuring that the right key is in the right place at the right time and compliance with rigorous security management procedures is mandated by many organizations, e.g. major card payment scheme providers (PCI). These requirements can be very challenging as most businesses need to manage an ever-increasing number of keys, while reducing the risk of internal and external fraud, as well as keeping costs at a minimum.

    The Crypto Key Management System (CKMS) streamlines administration and reduces costs associated with traditional paper based and XOR'ed key management. Through its efficient and automated protocols, CKMS gives users the flexibility to manage a very large number of application keys - throughout their entire life cycle - without drowning in work.

    Take control and achieve compliance with centralized and automated application key management.

    Using Cryptomathic CKMS, administrators can uniformly and centrally manage the life cycle of all cryptographic keys across a range of applications and encryption platforms.

    Functions of Cryptomathic

    • Generation / back up / restore / update
    • Distribution - automated or in key shares
    • Import or export in key shares
    • Enforce security controls
    • Encryption using Key Encryption Keys (KEKs) / Zone Master Keys (ZMKs)
    • Certification (e.g. using X.509 or EMV certificates)


    Manage the life cycle of all keys

    CKMS manages all aspects of cryptographic keys during their life cycle.

    Keys can be securely generated and pushed to any key distribution target as and when required, and key custodians can use asynchronous log-on to projects for adding components securely - reducing the need for manual key ceremonies, while vastly improving workflows.

    Based on industry standards, CKMS ensures compliance and simplifies internal and external audits.

    Read White Paper on deploying CKMS within your business and how it can solve your key management challenges. 

    Key Features and Benefits

    • At your desk key ceremonies
    • Automated key distribution and updating
    • Centralized life cycle key management
    • BYOK and Manage Your Own Key (MYOK) in the cloud
    • Manage different key types and formats
      • e.g. Atalla Key Block, BASE24, IBM CCA, MC OBKM, PKCS#8, TR-31  
    • Compliance 
      • Authorities: FIPS, Internal audit, PCI, Payment schemes and S/O
      • Domains: Physical (e.g. tamper) & logical security (crypto/SW/system design)
    • Configurable role-based access
    • Flexible key attributes eliminate paperwork
    • High availability and scalability
    • Searchable tamper evident audit log
    • Support for all major HSM brands
    • Trusted path using secure PIN pads

    Click here for product sheet.



    CKMS customers range from medium size enterprises to multinational companies in technology manufacturing and finance. Our key management customers include global players such as First Data, Infineon Technologies, MasterCard, Visa and SwedBank.



    Automated Key and Certificate Distribution

    See how CKMS automates key generation and distribution for any application 

    We are always ready to assist you 

    It doesn't matter where you are. We can work anywhere in the world! And we would love to hear from you, be sure we will reply asap.


    Case Study -   Swedbank 

    Learn how one of Europe’s largest acquirers has modernised its cryptographic key management activities through central generation.

    White Paper - EMV Key Management

    Lack of overview or trouble understanding EMV key management? EMV as seen from a crypto angle for all involved parties in acquiring and issuing.

    White Paper - Key Mgmt. Compliance

    Need guidance on key management compliance? Here we explain how to ensure key management compliance while managing costs for best practices and compliance audits.


    At the leading edge of security provision within its key markets, Cryptomathic closely supports its global customer base with many multinationals as longstanding clients.