Patent ID: 11924336
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 5:
6. A computer-implemented method, comprising:
obtaining, at a first virtualization server prior to a launch of a compute instance, (a) an entropy source value from a first control plane component of a virtualized computing service, and (b) a first counter value from a second control plane component of the virtualized computing service;
updating the first counter value to a second counter value after performing one or more cryptographic operations at the first virtualization server, wherein the one or more cryptographic operations include generating a particular security artifact used at the compute instance, wherein the particular security artifact is generated by a first virtualized security device configured at the first virtualization server and associated with the compute instance, wherein the first virtualized security device is configured using at least the entropy source value and the first counter value; and
performing one or more additional cryptographic operations at a second virtualization server to which the compute instance has been migrated from the first virtualization server, wherein the one or more additional cryptographic operations include including generating another security artifact which is used by the compute instance, wherein the other security artifact is generated by a second virtualized security device configured at the second virtualization server, and wherein the second virtualized security device is configured using at least the entropy source value and the second counter value.