A system for cryptographic objects deployment life-cycle management comprising: at least one execution unit for running asynchronously a deployment process for providing deployment specifications (CODS) for cryptographic objects and a distribution process for executing distribution-related operations in response to deployment specifications (CODS) recorded in a persistent data store, and an interface for receiving deployment specifications (CODS), wherein each deployment specification indicates a deployment of one or more cryptographic objects to one or more key-use entities of a network, wherein, said deployment process run on said execution unit comprises a validation of deployment specifications (CODS) received via said interface against a predetermined security policy, and said distribution process run on said execution unit comprises execution of each validated deployment specification (CODS) recorded in said persistent data store by distributing cryptographic objects to key use entities of the network according to a respective deployment specification (CODS), by updating or refreshing existing cryptographic objects used by key use entities of the network according to a respective deployment specification (CODS) and by withdrawing cryptographic objects from key use entities of the network according to a respective deployment specification (CODS). at least one execution unit for running asynchronously a deployment process for providing deployment specifications (CODS) for cryptographic objects and a distribution process for executing distribution-related operations in response to deployment specifications (CODS) recorded in a persistent data store, and a deployment process for providing deployment specifications (CODS) for cryptographic objects and a distribution process for executing distribution-related operations in response to deployment specifications (CODS) recorded in a persistent data store, and an interface for receiving deployment specifications (CODS), wherein each deployment specification indicates a deployment of one or more cryptographic objects to one or more key-use entities of a network, said deployment process run on said execution unit comprises a validation of deployment specifications (CODS) received via said interface against a predetermined security policy, and said distribution process run on said execution unit comprises execution of each validated deployment specification (CODS) recorded in said persistent data store by distributing cryptographic objects to key use entities of the network according to a respective deployment specification (CODS), by updating or refreshing existing cryptographic objects used by key use entities of the network according to a respective deployment specification (CODS) and by withdrawing cryptographic objects from key use entities of the network according to a respective deployment specification (CODS). by distributing cryptographic objects to key use entities of the network according to a respective deployment specification (CODS), by updating or refreshing existing cryptographic objects used by key use entities of the network according to a respective deployment specification (CODS) and by withdrawing cryptographic objects from key use entities of the network according to a respective deployment specification (CODS).