Systems and methods for minimizing boot time when using a unique key encryption key per storage resource in secure enterprise key management provisioning

A management controller configured for management of an information handling system comprising a processor, a plurality of storage resources communicatively coupled to the processor, each storage resource having a media encryption key for encrypting data written to such storage resource and decrypted data read from such storage resource, wherein such media encryption key is encrypted by a corresponding key encryption key, such that a unique key encryption key exists for each of the plurality of storage resources, the management controller comprising:

• a communication interface for communicatively coupling to a storage controller communicatively coupled to the processor and the plurality of storage resources and configured to manage one or more functions of the plurality of storage resources;
• and
• a key management utility configured to, during boot of the information handling system and in concert with the storage controller, prioritize retrieval of key encryption keys of bootable storage resources of the plurality of storage resources over retrieval of key encryption keys of non-bootable storage resources of the plurality of storage resources and prioritize decryption of media encryption keys of bootable storage resources of the plurality of storage resources using their corresponding key encryption keys over decryption of media encryption keys of non-bootable storage resources of the plurality of storage resources using their corresponding key encryption keys.

A method for use in an information handling system comprising a processor, and a plurality of storage resources communicatively coupled to the processor, each storage resource having a media encryption key for encrypting data written to such storage resource and decrypted data read from such storage resource, wherein such media encryption key is encrypted by a corresponding key encryption key, such that a unique key encryption key exists for each of the plurality of storage resources, the method comprising, during boot of the information handling system:

• identifying bootable storage resources of the plurality of storage resources;
• prioritizing retrieval of key encryption keys of bootable storage resources of the plurality of storage resources over retrieval of key encryption keys of non-bootable storage resources of the plurality of storage resources;
• and
• prioritizing decryption of media encryption keys of bootable storage resources of the plurality of storage resources using their corresponding key encryption keys over decryption of media encryption keys of non-bootable storage resources of the plurality of storage resources using their corresponding key encryption keys.