Patent ID: 9367341
Filing Date: 2016-06-14
CPC Classification: G06F

Claim Text:
1. A method, comprising: initializing, by a processing device of a host machine executing a virtual machine (VM), operations at the VM in response to authentication of the VM by a host controller machine via a single sign-on process that utilizes credentials of a user of the VM provided to the host controller machine by the user, wherein the host controller machine to define and configure the host machine and the VM and to manage the sign-on process for the VM, and wherein the host controller machine is separate from the host machine and separate from a directory server that authenticates the provided credentials of the VM for the host controller machine; receiving, by the VM subsequent to the user signing-on to the VM using the credentials via the single sign-on process and subsequent to initializing the VM, the credentials of the user of the VM from a hypervisor executing on the host machine and managing the VM, the credentials sent from the host controller machine to the hypervisor without interaction from the user and after the host controller machine successfully authenticates the VM using the credentials; referencing, by the VM subsequent to initializing the VM and subsequent to receiving the credentials at the VM, a configuration database of the host controller machine with the received credentials of the user to authenticate the credentials, the configuration database maintained by the host controller machine and storing encryption and decryption policy settings for the VM, the encryption and decryption policy settings comprising other credentials used for encrypting and decrypting for the VM; determining, by the VM subsequent to referencing the configuration database, the encryption and decryption policy settings for the VM from the configuration database in view of the received credentials; detecting one or more events that trigger at least one of an auto-encrypt or an auto-decrypt operation, wherein at least one of the events comprises an idle state of the VM for a determined period of time; and in response to detecting the one or more events, utilizing the received credentials of the user that were provided for the single sign-on process without requesting or receiving the other credentials of the user directly from the user to at least one of encrypting or decrypting, by the VM subsequent to determining the encryption and decryption policy settings, an entire virtual hard disk of the VM in view of the determined encryption and decryption policy settings, wherein the received credentials authenticate and enable the at least one of the encrypting or the decrypting.