KEY MANAGEMENT FOR SELF-ENCRYPTING DRIVES
An information handling system may include a processor; an encrypted storage resource, wherein the encrypted storage resource is coupled to the information handling system via a storage controller that does not implement locking and unlocking functionality for the encrypted storage resource; and a management controller configured to: receive a request to unlock the encrypted storage resource; determine an encryption key associated with the encrypted storage resource; and unlock the encrypted storage resource with the received encryption key via a sideband interface coupling the management controller to the encrypted storage resource.
1 . An information handling system comprising:
a processor;
an encrypted storage resource, wherein the encrypted storage resource is coupled to the information handling system via a storage controller that does not implement locking and unlocking functionality for the encrypted storage resource; and
a management controller configured to:
receive a request to unlock the encrypted storage resource;
determine an encryption key associated with the encrypted storage resource; and
unlock the encrypted storage resource with the received encryption key via a sideband interface coupling the management controller to the encrypted storage resource.
2 . The information handling system of claim 1 , wherein the encrypted storage resource is coupled to the information handling system in a direct-attached mode.
3 . The information handling system of claim 1 , wherein the encrypted storage resource is coupled to the information handling system via a SAS/SATA controller.
4 . The information handling system of claim 1 , wherein the encryption key associated with the encrypted storage resource is stored within the management controller.
5 . The information handling system of claim 1 , wherein the encryption key associated with the encrypted storage resource is retrieved from an external key management server.
6 . A method comprising:
a management controller of an information handling system receiving a request to unlock an encrypted storage resource that is coupled to the information handling system via a storage controller that does not implement locking and unlocking functionality for the encrypted storage resource;
the management controller determining an encryption key associated with the encrypted storage resource; and
the management controller unlocking the encrypted storage resource with the received encryption key via a sideband interface coupling the management controller to the encrypted storage resource.
7 . The method of claim 6 , wherein the encrypted storage resource is coupled to the information handling system in a direct-attached mode.
8 . The method of claim 6 , wherein the encrypted storage resource is coupled to the information handling system via a SAS/SATA controller.
9 . The method of claim 6 , wherein the encryption key associated with the encrypted storage resource is stored within the management controller.
10 . The method of claim 6 , wherein the encryption key associated with the encrypted storage resource is retrieved from an external key management server.
11 . An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable instructions thereon that are executable by a processor of a management controller of an information handling system for:
receiving a request to unlock an encrypted storage resource that is coupled to the information handling system via a storage controller that does not implement locking and unlocking functionality for the encrypted storage resource;
determining an encryption key associated with the encrypted storage resource; and
unlocking the encrypted storage resource with the received encryption key via a sideband interface coupling the management controller to the encrypted storage resource.
12 . The article of claim 11 , wherein the encrypted storage resource is coupled to the information handling system in a direct-attached mode.
13 . The article of claim 11 , wherein the encrypted storage resource is coupled to the information handling system via a SAS/SATA controller.
14 . The article of claim 11 , wherein the encryption key associated with the encrypted storage resource is stored within the management controller.
15 . The article of claim 11 , wherein the encryption key associated with the encrypted storage resource is retrieved from an external key management server.