Patent ID: 8489893
Filing Date: 2013-07-16
Classification: G06F,H04L

Abstract:
1. A method of performing key rotation in a computing environment having a storage media and first and second storage controllers coupled to the storage media, the method comprising: signaling, with a host, the first storage controller to write a key rotation message to the storage media indicating that the first storage controller is performing key rotation; signaling, with the host, the second storage controller to observe the key rotation message from the storage media, wherein the second storage controller suspends access of the second storage controller to encrypted portions of the storage media in response to observing the key rotation message indicating that the first controller is performing key rotation; and signaling, with the host, the first storage controller to perform key rotation, wherein the first storage controller performs key rotation by reading data blocks from the storage media, decrypting data blocks using an old key, encrypting data blocks using a new key, and writing the data blocks to the storage media.