I've gone the route of live ubuntu cd, bitaddress to generate addresses, encrypt with gpg and store encrypted backups online in multiple places.