Dell Products Inc.

Karthikeyan Rajagopalan

Sanjeev Dambal

Chandrashekar Nelogal

Vigneswaran Ponnusamy

Karthik Arunachalam

Mukund Purshottam Khatri

James Peter Giannoules

Marcelo Silva Saraiva

Craig Phelps

Texas Roemer

Kumaran Palaniappan

Kumaran Palaniappan Thangavelu

Sura Reddy

Sisir K Dash

A method for managing a storage system includes initiating, by a hardware resource manager, a boot-up of a storage controller managing the storage system comprising a plurality of storage devices, making a determination, by the storage controller, that the storage controller is in a secured mode, based on the determination: identifying a security state of each of the plurality of storage devices, determining that a storage device of the plurality of storage devices is in an unsecured state, and based on the unsecured state, sending, by the storage controller, a security operation request for securing the storage device, obtaining a secure state response from the hardware resource manager corresponding to securing the storage device, and based on the secure state response, resuming operation of the storage controller based on the secure mode.

Method and system for a secure management of storage devices using a key management service

Method and system for a conditional key storage in a hardware resource manager

A disclosed method for managing encryption keys, which may be performed by a key management server, responds to receiving, from a first client, a request to create a new key for a self-encrypting drive (SED) associated with the first client by retrieving unique identifiers of the first client and the SED, generating and storing the new key and a corresponding key identifier (KeyID), and associating the unique identifiers of the SED and first client with the new key. Upon receiving, from a second client, a locate key request that includes the SED identifier, providing the new key, the KeyID, and the first client identifier to the second client. Associating the SED and first client identifiers with the new key may include adding the identifiers as attributes of the KeyID. Embodiments may be implemented in accordance with a key management interoperability protocol (KMIP) standard.

Managing migration of self encrypted drive within a single key management system user group

An information handling system may include a processor and a management controller communicatively coupled to the processor. The management controller may be configured to, in response to an encrypted storage resource being coupled to the information handling system: transmitting a request to at least one other management controller for an encryption key associated with the encrypted storage resource; receiving a response from the at least one other management controller, the response including the encryption key associated with the encrypted storage resource; and unlocking the encrypted storage resource with the received encryption key.

Management controller based drive migration

An information handling system includes a first node configured to generate a random alphanumeric string, to receive a cipher text and a key from an enterprise key management server, and to decrypt the cipher text using the key and an algorithm to generate a first decrypted value. The first node compares the random alphanumeric string with the first decrypted value to verify the key that is received at the first node. A second node receives the cipher text, the key, and the algorithm from the first node in response to the first decrypted value matching the random alphanumeric string. The second node decrypts the cipher text using the key and the algorithm to generate a second decrypted value, and the first node compares the second decrypted value with the random alphanumeric string to verify the key that is received at the second node. A self-encrypting drive receives the key from the second node in response to the second decrypted value matching the random alphanumeric string, and uses the key upon authentication of the key by the second node.

Method and apparatus for ensuring integrity of keys in a secure enterprise key manager solution

Growing community of inventors

Austin, TX, United States of America

Karthikeyan Rajagopalan