EMBASSY Key Management Server (EKMS) is a server software product for secure backup and restoration of protected keys from one TPM-enabled system to another according to security policies defined on the server.

The KTM client software formats TPM-secured keys into individual migration packages and securely transmits them to the server for storage and subsequent recovery. Retrieval of the archived information requires authorized access based upon the enterprise's security policy settings.