Patent ID: 11928365
Assignee: EMC IP HOLDING COMPANY LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
wherein the at least one processing device is configured:
to receive in a storage system, from a host device, mapping information associating a key identifier of a datastore-level key with a corresponding datastore comprising multiple logical storage devices of the storage system, the datastore-level key identified by the key identifier comprising a cryptographic key utilized for at least one of encrypting and decrypting data of the datastore, the mapping information comprising the key identifier and additional information including an identifier of the datastore and respective identifiers of its multiple logical storage devices;
to store the mapping information in a datastore-level key data structure of the storage system;
to utilize the key identifier to obtain in the storage system the datastore-level key from a key management server external to the storage system; and
responsive to receipt of at least one IO operation from the host device relating to at least one of reading or writing encrypted data of at least one of the logical storage devices of the datastore, to utilize the obtained datastore-level key to access the encrypted data in unencrypted form in the storage system;
wherein the mapping information is updated responsive to at least one of addition of at least one logical storage device to the datastore and deletion of at least one logical storage device from the datastore.