Patent ID: 11928229
Assignee: COMMVAULT SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A computer-implemented method comprising:
by a storage manager that controls storage operations in an information management system, wherein the storage manager comprises one or more hardware processors:
receiving, from a client computing device, a first encrypted private key associated with the client computing device,
wherein the receiving is based on a trigger to replace a first passphrase associated with the client computing device, and
wherein the first encrypted private key is part of an asymmetric key pair for encrypting and decrypting a data encryption key that was used to encrypt one or more files associated with the client computing device;
decrypting the first encrypted private key using the first passphrase to obtain a decrypted private key of the asymmetric key pair;
obtaining a second passphrase that differs from the first passphrase by one of: accessing the second passphrase, and generating the second passphrase;
encrypting the decrypted private key using the second passphrase, to obtain a second encrypted private key that differs from the first encrypted private key;
associating the second passphrase with the client computing device,
designating the first passphrase as inactive;
designating the second passphrase as active; and
transmitting the second encrypted private key to the client computing device.