Patent ID: 8259948

Claim:
A method comprising: receiving a key migration request including an identifier of a key to migrate, a public key of a parent key of a target Trusted Platform Module (“TPM”), and a migration authority of the key to migrate; creating a temporary migration key without regard to a Hardware Trusted Platform Module (“hTPM”); sending a key migration request, the migration authority, and a public portion of the temporary migration key to a hTPM; receiving a first migration blob from the hTPM including a private portion of a hTPM key encrypted using the public portion of the temporary migration key; decrypting the first migration blob using the temporary migration key to obtain clear text; replacing at least part of the private portion of the hTPM key in the clear text with at least part of a Virtual Trusted Platform Module (“vTPM”) key private portion; and building a second migration blob as a function of the clear text and encrypting the second migration blob with the public key of the parent key of the target TPM.