Patent ID: 8856553

Claim:
A computer system comprising: one or more processing devices, wherein the one or more processing devices process computer program instructions; a self-encrypting drive including nonvolatile storage; wherein the computer program instructions, when processed by the one or more processing devices, provision the self-encrypting drive, wherein a provisioned drive on the self-encrypting drive includes: one or more locking ranges and a global range; an authority object for each locking range that stores authentication information for the locking range, a locking range object for each locking range that stores state information for the locking range, and a data store object including information stored for each locking range including key management data; and the provision process comprising: configuring the authority object and locking range object for each locking range; and enabling all users to read the authority object and locking range objects, but enabling only the user assigned to the locking range to modify the authority object and locking range objects for the locking range.