Which component centralizes generation and storage of cryptographic keys in PKI?

Which component centralizes generation and storage of cryptographic keys in PKI?

• A. Entropy
• B. PRNG
• C. Key management system
• D. Certificate

Answer: (C)

This centers on how cryptographic keys are generated and stored across the PKI. A key management system is designed to handle the entire lifecycle of keys—creating them, securely storing them, enforcing access controls, rotating them, and auditing usage. By providing a centralized repository and policy enforcement, it ensures private keys (often protected in hardware security modules) remain secure and available only to authorized processes and personnel. Entropy is simply a source of randomness used during key generation, not a storage or lifecycle management component. A pseudo-random number generator produces numbers used in creation but does not manage or store keys. A certificate is a public credential tied to a key pair, not a tool for centralizing key generation and storage. Hence, the key management system best fits the role of centralizing generation and storage of cryptographic keys in PKI.

This centers on how cryptographic keys are generated and stored across the PKI. A key management system is designed to handle the entire lifecycle of keys—creating them, securely storing them, enforcing access controls, rotating them, and auditing usage. By providing a centralized repository and policy enforcement, it ensures private keys (often protected in hardware security modules) remain secure and available only to authorized processes and personnel. Entropy is simply a source of randomness used during key generation, not a storage or lifecycle management component. A pseudo-random number generator produces numbers used in creation but does not manage or store keys. A certificate is a public credential tied to a key pair, not a tool for centralizing key generation and storage. Hence, the key management system best fits the role of centralizing generation and storage of cryptographic keys in PKI.