Patent ID: 8369529

Claim:
A method for re-keying data, comprising: pre-generating encryption keys by a first security appliance of a plurality of security appliances before a re-key command is received at the first security appliance having a processor; generating a minimum count of unused pre-generated encryption keys; distributing the pre-generated encryption keys and the minimum count to a second security appliance of the plurality of security appliances; storing the pre-generated encryption keys and the minimum count; receiving the re-key command at the first security appliance to re-key a data container served by a storage system; in response to receiving the re-key command, re-keying the data container with a pre-generated encryption key of the pre-generated encryption keys; and generating, by at least one security appliance of the plurality of security appliances, additional pre-generated keys, wherein the additional pre-generated encryption keys are generated in response to reaching the minimum count.