Patent ID: 8943328
Filing Date: 2015-01-27
Classification: G06F,H04L

Abstract:
1. A method of performing key rotation in a computing environment having a host, a first storage media, first and second I/O managers coupled between the host and the first storage media, a second storage media that mirrors the first storage media to create a mirrored volume, and a third I/O manager coupled between the host and the second storage media, the method comprising: signaling the second I/O manager to suspend servicing I/O requests from the host to access the first storage media; signaling the first I/O manager to perform a first key rotation by reading data blocks from the first storage media, decrypting the data blocks using an old key, encrypting the data blocks using a new key, and writing the data blocks to the first storage media; and once the first key rotation is complete, signaling the third I/O manager to perform a second key rotation on the second storage media.