Managing data encryption during system upgrades

A method comprising:

• detecting an upgrade to a component of a computing device, wherein the computing device comprises encrypted data;
• in response to detecting the upgrade and prior to a boot process, deactivating a link between a set of platform configuration register (PCR) values and a first decryption key usable to decrypt the encrypted data;
• accessing a second decryption key usable to decrypt the encrypted data during the boot process via an alternative link between a network server and the second decryption key;
• and
• subsequent to the boot process, updating the set of PCR values and linking the updated set of PCR values and the first decryption key.

A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:

• detecting an upgrade to a component of a computing device, wherein the computing device comprises encrypted data;
• in response to detecting the upgrade and prior to a boot process, deactivating a link between a set of platform configuration register (PCR) values and a first decryption key usable to decrypt the encrypted data;
• accessing a second decryption key usable to decrypt the encrypted data during the boot process via an alternative link between a network server and the second decryption key;
• and
• subsequent to the boot process, updating the set of PCR values and linking the updated set of PCR values and the first decryption key.