2.6 Payment application must implement key management processes and procedures for keys used for encryption of cardholder data.
PCI Data Security Standard Requirement 3.6
Testing Procedures:
2.6 Verify the payment application implements key management techniques, per PCI DSS Requirement 3.6.