In Cryptographic Support, a key-encrypting key derived from the host master key that is used to encrypt a certain type of cross-domain key.