Replicated encrypted data management

A system for local encryption of a set of replicated data in a shared pool of configurable computing resources which has a set of member nodes, the system comprising:

• a memory having a set of computer readable computer instructions, and
• a processor for executing the set of computer readable instructions, the set of computer readable instructions including:
• determining, by a first node of the set of member nodes, a first local encryption key for the first node of the set of member nodes with respect to a first copy of the set of replicated data;
• parsing a hardware configuration of the first node to identify a first unique hardware identifier;
• generating, with respect to the first copy of the set of replicated data by the first node of the set of member nodes, the first local encryption key for the first node of the set of member nodes using the first unique hardware identifier as a seed value;
• determining, by a second node of the set of member nodes, a second local encryption key for the second node of the set of member nodes with respect to a second copy of the set of replicated data, wherein the second local encryption key differs from the first local encryption key;
• generating, with respect to the second copy of the set of replicated data by the second node of the set of member nodes, the second local encryption key for the second node of the set of member nodes based on a second unique hardware identifier for the second node;
• generating, to modify the set of replicated data, a temporary key for utilization by both the first and second nodes of the set of member nodes, wherein the temporary key is used for one encryption operation and one decryption operation before being invalidated;
• and
• updating, on the first and second nodes of the set of member nodes, the set of replicated data using the first local encryption key, the temporary key, and the second local encryption key.

A computer program product for local encryption of a set of replicated data in a shared pool of configurable computing resources which has a set of member nodes, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to cause the processor to perform a method comprising:

• determining, by a first node of the set of member nodes, a first local encryption key for the first node of the set of member nodes with respect to a first copy of the set of replicated data;
• parsing a hardware configuration of the first node to identify a first unique hardware identifier;
• generating, with respect to the first copy of the set of replicated data by the first node of the set of member nodes, the first local encryption key for the first node of the set of member nodes using the first unique hardware identifier as a seed value;
• determining, by a second node of the set of member nodes, a second local encryption key for the second node of the set of member nodes with respect to a second copy of the set of replicated data, wherein the second local encryption key differs from the first local encryption key;
• generating, with respect to the second copy of the set of replicated data by the second node of the set of member nodes, the second local encryption key for the second node of the set of member nodes based on a second unique hardware identifier for the second node;
• generating, to modify the set of replicated data, a temporary key for utilization by both the first and second nodes of the set of member nodes, wherein the temporary key is used for one encryption operation and one decryption operation before being invalidated;
• and
• updating, on the first and second nodes of the set of member nodes, the set of replicated data using the first local encryption key, the temporary key, and the second local encryption key.