Patent ID: 11928229
Assignee: COMMVAULT SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 11:
12. The computer-implemented method of claim 1 further comprising:
by the client computing device, which comprises one or more hardware processors:
receiving an identification of a first data file to be backed up to secondary storage, wherein the first data file is associated with the client computing device;
based on determining that the first data file is encrypted, accessing the second encrypted private key;
transmitting the second encrypted private key to the storage manager;
receiving from the storage manager a second decrypted private key, which comprises a decrypted version of the second encrypted private key;
extracting an encrypted data encryption key from the first data file;
decrypting the encrypted data encryption key using the second decrypted private key received from the storage manager, resulting in a decrypted version of the data encryption key;
decrypting the first data file using the decrypted version of the data encryption key, resulting in a decrypted first data file; and
making the decrypted first data file available to a secondary storage computing device for storage to the secondary storage, wherein the secondary storage computing device comprises one or more hardware processors and is communicatively coupled to the secondary storage.