Abstract: A system, method, and apparatus are provided for establishing a secure, split-terminated, communication connection between a client and a server (or two other communicants), without exposing to possible compromise one or more private keys used at an intermediate device to establish the communication connection. The private key(s) is or are stored on a key server that is separate from the intermediate device and from any other devices whose private keys are also stored on the key server. During the handshaking to establish the communication connection, one or more handshaking messages (or components of the messages) are submitted to the key server, by the intermediate device, for encryption or decryption with the corresponding key(s). The resulting encrypted or decrypted information is returned to the intermediate device for further action (e.g., to be forwarded or processed).