Piecing together a key management solution from open source is possible, but if you're trying to encrypt data and are open to commercial products, we do a lot o

Piecing together a key management solution from open source is possible, but if you're trying to encrypt data and are open to commercial products, we do a lot of support of Vormetric. All of the key management is "built-in" and managed, so there really isn't much overhead. All software-based, with FIPS certified key management. It's very easy to encrypt data this way. It is expensive though. Disclaimer: while I used to work for Vormetric / Thales, I no longer do.