As shown in FIG. 1, the environment 100 may correspond to a network cluster or a data center. For example, a first network server may provide the key management system 120 and a second network server may provide an application 130. In some embodiments, a same network server may provide both the application 130 and the key management system 120. The environment may also include entities 110a-n that correspond to computing devices associated with approving entities. The computing devices of entities 110a-n may be computing devices such as a server computer, a desktop computer, a set-top box, a gaming console, a television, a portable computing device such as, and not limited to, mobile telephones, personal digital assistants (PDAs), portable media players, netbooks, laptop computers, an electronic book reader and the like.

A network connection may couple the application 130 with the key management system 120. In some embodiments, the network connection may be a network connection between a network server that provides the application 130 and another network server that provides the key management system 120. In embodiments, the network connection may be a local connection associated with a network server that provides both the application 130 and the key management system 120. A second network connection may couple entities 110a-n with the key management system 120. The network connection may be a network connection between a network server that provides the key management system 120 and client devices associated with entities 110a-n. Entities 110a-n may be approving entities that may approve or reject operations to be performed on cryptographic items of the key management system.