Abstract: Public key infrastructure （PKI） has some limitations in the convenience of implementation and flexibility These prevent the PKI technology from being spread and used widely In this paper an XML-based key management mechanism is proposed By using the XML-based XKMS messages, it delegates the keys and certificates process to trust service, so that the implementation of PKI application will become easier and the way that the applications obtain the PKI service will be more flexible