Key Vault is a trusted component responsible to generate, store and distribute secret keys. It runs on the Arm Trusted Execution Environment (TEE) technology: TrustZone. This implementation uses the OPTEE (Open Platform TEE) as Secure OS (Secure World).