Management controller based drive migration
An information handling system may include a processor and a management controller communicatively coupled to the processor. The management controller may be configured to, in response to an encrypted storage resource being coupled to the information handling system: transmitting a request to at least one other management controller for an encryption key associated with the encrypted storage resource; receiving a response from the at least one other management controller, the response including the encryption key associated with the encrypted storage resource; and unlocking the encrypted storage resource with the received encryption key.
1. An information handling system comprising:
a processor; and
a management controller communicatively coupled to the processor and configured to, in response to an encrypted storage resource being removed from a prior information handling system that includes a prior management controller, and the encrypted storage resource being coupled to the information handling system:
transmit a request to the prior management controller for an encryption key associated with the encrypted storage resource, wherein the request indicates a key identifier stored on the encrypted storage resource;
receive a response from the prior management controller, the response including the encryption key associated with the encrypted storage resource;
unlock the encrypted storage resource with the received encryption key; and
re-encrypt the unlocked storage resource with an encryption key associated with the management controller;
wherein the prior management controller is configured to provide out-of-band management of the prior information handling system, and wherein the management controller is configured to provide out-of-band management of the information handling system.
2. The information handling system of claim 1 , wherein the encrypted storage resource is a self-encrypting storage resource.
3. The information handling system of claim 2 , wherein the encrypted storage resource includes a media encryption key for encrypting data written to the encrypted storage resource and decrypting data read from the encrypted storage resource, wherein the media encryption key is encrypted by a corresponding key encryption key, and wherein the received encryption key is the key encryption key.
4. The information handling system of claim 1 , wherein the encrypted storage resource is coupled to the information handling system via a RAID storage controller.
5. The information handling system of claim 1 , wherein the request is broadcast to a plurality of management controllers within a single management group.
6. The information handling system of claim 1 , wherein the request is transmitted only to the prior management controller based on the key identifier stored on the encrypted storage resource.
7. A method comprising:
in response to an encrypted storage resource being removed from a prior information handling system that includes a prior management controller, and the encrypted storage resource being coupled to an information handling system, a management controller of the information handling system transmitting a request to the prior management controller for an encryption key associated with the encrypted storage resource, wherein the request indicates a key identifier stored on the encrypted storage resource;
the management controller receiving a response from the prior management controller, the response including the encryption key associated with the encrypted storage resource;
the management controller unlocking the encrypted storage resource with the received encryption key; and
the management controller e-encrypting the unlocked storage resource with an encryption key associated with the management controller;
wherein the prior management controller is configured to provide out-of-band management of the prior information handling system, and wherein the management controller is configured to provide out-of-band management of the information handling system.
8. The method of claim 7 , wherein the encrypted storage resource is a self-encrypting storage resource.
9. The method of claim 8 , wherein the encrypted storage resource includes a media encryption key for encrypting data written to the encrypted storage resource and decrypting data read from the encrypted storage resource, wherein the media encryption key is encrypted by a corresponding key encryption key, and wherein the received encryption key is the key encryption key.
10. The method of claim 7 , wherein the encrypted storage resource is coupled to the information handling system via a RAID storage controller.
11. The method of claim 10 , wherein the request is broadcast to a plurality of management controllers within a single management group.
12. The method of claim 7 , wherein the request is transmitted only to the prior management controller based on the key identifier stored on the encrypted storage resource.
13. An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable instructions thereon that are executable by a processor of a management controller of an information handling system for:
in response to an encrypted storage resource being removed from a prior information handling system that includes a prior management controller, and the encrypted storage resource being coupled to the information handling system, transmitting a request to the prior management controller for an encryption key associated with the encrypted storage resource, wherein the request indicates a key identifier stored on the encrypted storage resource;
receiving a response from the prior management controller, the response including the encryption key associated with the encrypted storage resource;
the management controller unlocking the encrypted storage resource with the received encryption key; and
the management controller re-encrypting the unlocked storage resource with an encryption key associated with the management controller;
wherein the prior management controller is configured to provide out-of-band management of the prior information handling system, and wherein the management controller is configured to provide out-of-band management of the information handling system.
14. The article of claim 13 , wherein the encrypted storage resource is a self-encrypting storage resource.
15. The article of claim 14 , wherein the encrypted storage resource includes a media encryption key for encrypting data written to the encrypted storage resource and decrypting data read from the encrypted storage resource, wherein the media encryption key is encrypted by a corresponding key encryption key, and wherein the received encryption key is the key encryption key.
16. The article of claim 13 , wherein the encrypted storage resource is coupled to the information handling system via a RAID storage controller.
17. The article of claim 13 , wherein the request is broadcast to a plurality of management controllers within a single management group.
18. The article of claim 13 , wherein the request is transmitted only to the prior management controller based on the key identifier stored on the encrypted storage resource.