Method and apparatus for ensuring integrity of keys in a secure enterprise key manager solution

A method, comprising:

• generating, by a first node, a random alphanumeric string;
• receiving, by the first node, a cipher text and a key from an enterprise key management server;
• decrypting the cipher text using the key and an algorithm to generate a first decrypted value, wherein the first node compares the random alphanumeric string with the first decrypted value to verify the key that is received at the first node;
• receiving, by a second node, the cipher text, the key, and the algorithm from the first node in response to the first decrypted value matching the random alphanumeric string, wherein the second node decrypts the cipher text using the key and the algorithm to generate a second decrypted value;
• comparing, by the first node, the random alphanumeric string with the second decrypted value to verify the key that is received at the second node;
• and
• receiving, by a self-encrypting drive, the key from the second node in response to the second decrypted value matching the random alphanumeric string, wherein the self-encrypting drive uses the key upon authentication by the second node.

A rack server, comprising:

• an enterprise key management server;
• and
• an information handling system coupled to the enterprise key management server, including:
• a first node configured:
• to generate a random alphanumeric string;
• to receive a cipher text and a key from the enterprise key management server;
• and to decrypt the cipher text using the key and an algorithm to generate a first decrypted value, wherein the first node compares the random alphanumeric string with the first decrypted value to verify the key that is received at the first node;
• a second node configured to receive the cipher text, the key, and the algorithm from the first node in response to the first decrypted value matching the random alphanumeric string, wherein the second node decrypts the cipher text using the key and the algorithm to generate a second decrypted value, wherein the first node compares the second decrypted value with the random alphanumeric string to verify the key that is received at the second node;
• and
• a storage device configured to receive the key from the second node in response to the second decrypted value matching the random alphanumeric string, wherein the storage device utilizes the key upon authentication of the key by the second node.