method of properly issuing, maintaining and organizing encryption keys.
the generation, storage, distribution, deletion, archiving, and application of keys in accordance with a security policy.
ensures that only authorized personnel can access the physical keys.