Patent ID: 9703586
Date: 2017-07-11
CPC Classifications: G06F,H04L

Claim:
1. A method for booting a virtual machine, comprising: receiving, on a second computing device, a file containing a virtual hard disk drive, the file being at least partially encrypted by a first encryption key, the first encryption key cryptographically protected by a first mechanism provided by a first device on a first computing device; receiving, on the second computing device, a copy of the first encryption key cryptographically protected by a second mechanism provided by a service, wherein the copy of the first encryption key cryptographically protected by the second mechanism is received from the service; receiving, on the second computing device, a recovery password from the service in response to a boot of the virtual hard disk drive on the second computing device by an authorized user; using the recovery password to recover the copy of the first encryption key on the second computing device cryptographically protected by the second mechanism; using the recovered copy of the first encryption key to decrypt at least a portion of the at least partially encrypted file; encrypting the copy of the first encryption key with a second device on the second computing device.