OpenStack has a key manager, barbican, the secrets manager for the Red Hat OpenStack Platform. With barbican API and the command line, we can simply manage everything from centrally managing the certificates and keys to passwords used by other OpenStack services.   The secrets are managed using-  Symmetric encryption keys- we can use them for Block Storage (cinder) volume encryption, ephemeral disk encryption, and Object Storage (swift) encryption, among others.  Asymmetric keys and certificates- we can use them for glance image signing and verification, among others.  Also, we can integrate barbican with the Block Storage (cinder) and Compute (nova) components. Key features of secret management-  Storage and retrieval of secrets.  Define and manage access policies for the key.  Administrative functionality and control of the lifecycle of key material.  An efficient auditing ability in OpenStack services for key access and lifecycle events.  Key management as a service available for all PaaS application(s) deployed on an OpenStack cloud.  We can scale key management effectively and improves availability.  We can encrypt volumes/disks.