System and method for slice virtual disk encryption

An information handling system, comprising:

• a processor;
• and
• a memory device storing code that when executed causes the processor to perform operations, the operations including:
• transmitting an input/output request that includes a data payload to write to a data storage system;
• identifying a virtual disk that is associated with a virtual machine;
• identifying a start address and an end address of the virtual disk;
• transmitting a key request for a key encryption key, wherein the key request includes the start address and the end address of the virtual disk;
• generating the key encryption key, in response to determining that the start address and the end address are valid;
• generating a smart key encryption key based on the key encryption key;
• encrypting a media encryption key with the smart key encryption key;
• and
• encrypting the data payload with the encrypted media encryption key prior to storing the data payload in the virtual disk.

A non-transitory computer-readable medium to store instructions that are executable to perform operations comprising:

• transmitting an input/output request that includes a data payload to write to a data storage system;
• identifying a virtual disk that is associated with a virtual machine;
• identifying a start address and an end address of the virtual disk;
• transmitting a key request for a key encryption key, wherein the key request includes the start address and the end address of the virtual disk;
• generating the key encryption key in response to determining that the start address and the end address are valid;
• generating a smart key encryption key based on the key encryption key;
• encrypting a media encryption key with the smart key encryption key;
• and
• encrypting the data payload with the encrypted media encryption key prior to storing the data payload in the virtual disk.