I personally have no idea on the Enterprise Key and Certificate Management product.   I am interested in the solution rnalband came up with in the post after this.   Looks promising.