Patent ID: 8561209

Claim:
A method implemented at least in part by a computer, the method comprising: installing an orchestrating agent on a computing device; facilitating, by the orchestrating agent, that a set of actions be performed in an order, the set of actions, when performed in the order, cryptographically protecting volume data of at least one volume of one or more storage devices connected to the computing device, the facilitating including: determining, by the orchestrating agent, that an active session is present on the computing device in conjunction with at least one of the actions; and sending, by the orchestrating agent, protector data obtained by at least one of the actions to an escrow service for storing the protector data on a recovery store external to the computing device, the protector data usable to unlock at least one of the volumes of the computing device, wherein the set of actions comprises: obtaining the protector data of a type for an operating system volume of the computing device, the type specified by configuration data used by the orchestrating agent; storing the protector data in a protector store of the computing device; receiving confirmation that the protector data was stored on the recovery store; and after the receiving confirmation that the protector data was stored on the recovery store, allowing the operating system volume to be encrypted.