International Business Machines Corporation

Isabel Arnold

Nataraj Nagaratnam

Christopher S Smith

Marco Pavone

Leo Moesgaard

Troels Nørgaard

Søren Peen

Jakub Karol Jelonek

Blazej Pawlak

A system, method, and computer program product for implementing encryption key management is provided. The method includes connecting a hardware device to a keystore agent comprising a system configured to manage one or more keystores holding one or more cryptographic key instances. A key template is configured to define an attribute for generating cryptographic keys. The key template is modified such that the keystore component is added to the key template and instances of associated cryptographic keys are generated. Each instance is installed within the keystore component and associated attributes associated with data for consumption are generated. A key event log defining all events associated with a given key of the associated cryptographic keys with respect to a lifetime of the given key is generated and a repository comprising key templates and associated key data is maintained.

Encryption key hybrid deployment management

Growing community of inventors

Holte, Denmark

Isabel Arnold