Protecting an encryption key for data stored in a storage system that includes a plurality of storage devices

An apparatus for protecting an encryption key for data stored in a storage system that includes a plurality of storage devices, the apparatus comprising:

• a computer processor;
• and
• a computer memory operatively coupled to the computer processor;
• wherein the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
• reading, from a majority of each of the storage devices, a portion of an apartment key, wherein the portion of the apartment key is stored in an unlocked portion of the majority of each of the storage devices and wherein a main portion of the majority of each of the storage devices is locked;
• reconstructing the apartment key using portions of the apartment key read from the majority of each of the storage devices;
• unlocking the main portion of the majority of each of the storage devices by utilizing the apartment key;
• reading, from a main portion of a majority of one of the storage devices, a remote resource access key;
• requesting, from remote resource utilizing the remote resource access key, the encryption key for data stored on the storage devices;
• receiving, from the remote resource, the encryption key for data stored on the storage devices;
• and
• decrypting the data stored on the storage devices by utilizing the encryption key.

A storage system that includes a plurality of storage devices, the storage system including:

• a computer processor;
• and
• a computer memory operatively coupled to the computer processor;
• wherein the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the storage system to carry out the steps of:
• reading, from a majority of each of the storage devices, a portion of an apartment key, wherein the portion of the apartment key is stored in an unlocked portion of the majority of each of the storage devices and wherein a main portion of the majority of each of the storage devices is locked;
• reconstructing the apartment key using portions of the apartment key read from the majority of each of the storage devices;
• unlocking the main portion of the majority of each of the storage devices by utilizing the apartment key;
• reading, from a main portion of a majority of one of the storage devices, a remote resource access key;
• requesting, from remote resource utilizing the remote resource access key, an encryption key for data stored on the storage devices;
• receiving, from the remote resource, the encryption key for data stored on the storage devices;
• and
• decrypting the data stored on the storage devices by utilizing the encryption key.