Yes, you can use your own key management service or another 3rd party. To do that, you will need to build an attestation process or service to be able to validate the signed attestation documents generated by your enclave.