Patent ID: 9047468
Filing Date: 2015-06-02
Classification: G06F,H04L

Abstract:
1. A method comprising: with a chassis management module instantiating a plurality of virtual security hardware instances corresponding to a plurality of blade servers, obtaining a key from a first virtual security hardware instance of said plurality of virtual security hardware instances, the key to perform an operation on a first blade server of said plurality of blade servers, wherein the first virtual security hardware instance corresponds to said first blade server; in response to a command directed at first security hardware of the first blade server, providing the key to the first blade server via a secure out-of-band communication channel between said chassis management module and said plurality of blade servers, wherein the secure out-of-band communication channel comprises a signal path that is inaccessible to an external network; with said chassis management module, migrating, without decrypting, encrypted data stored on the first blade server to a second blade server of said plurality of blade servers, the encrypted data having been encrypted with the key; and with said chassis management module, migrating said key from said first virtual security hardware instance to a second virtual security hardware instance of said plurality of virtual security hardware instances via said secure out-of-band communication channel, the second virtual security hardware instance corresponding to said second blade server.