The set of processes and mechanisms which support cryptographic key establishment and maintenance, including replacing older keys with new keys as necessary.