Patent ID: 8938626
Filing Date: 2015-01-20
Classification: G06F

Abstract:
1. A computer implemented method comprising: a service processor establishing a kill switch encryption key (KSEK) to provide data security for data stored within one or more storage devices that are associated with one or more configurable components of an HIS, wherein establishing the KSEK comprises: configuring the one or more configurable components to provide access to and enable decryption of data stored within the one or more storage devices only when a valid copy of the KSEK is received from the service processor along with a request for access to the stored data during active running of the IHS; automatically encrypting, with the KSEK, data that is written to the one or more storage devices; and in response to receiving a verified request to decommission the IHS, deleting the KSEK from a secure storage at which the KSEK is securely maintained; wherein the stored data can only be decrypted to a usable form by using the KSEK and deletion of the KSEK results in a permanent loss of access to the stored data in each of the one or more storage devices in the IHS.