Patent US 8,635,446

A distributed cryptographic management system can include: a central key management service accessible through the network and having a database associated therewith; an approval module programmed to receive approval for any client machines connectable to the network and applications associated with the client machines, the database storing records for the client machines, and a key management domain being defined by all approved client machines and applications; and an agent module programmed to provide key management agents, wherein the key management agents are transferable and installable on any of the approved client machines and applications within the key management domain.