In Cryptographic Support, a type of key-encrypting key used to encrypt data-encrypting keys and whose variants are used to encrypt all other key-encrypting keys stored on the system.