Key server and storage deadlock control

A system, comprising:

• at least one processor;
• and
• memory or storage comprising an algorithm or computer instructions, which when executed by the at least one processor, performs an operation comprising:
• determining a location identifier of a key server;
• determining a first storage identifier based on the location identifier, wherein the first storage identifier identifies a storage volume that stores cryptographic keys of the key server;
• determining a second storage identifier that identifies a storage device or storage system that stores data at rest encrypted by the cryptographic keys;
• identifying a potential deadlock between the key server and the storage device or storage system based on the first storage identifier and the second storage identifier;
• controlling the key server based on the potential deadlock;
• and
• responsive to determining that a device request of the key server to access the storage device or storage system involves an initial setup of the key server or the storage device or storage system, rejecting the device request of the key server to the storage device or storage system.

A computer-readable storage medium having a computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform operations comprising:

• determining a location identifier of a key server;
• determining a first storage identifier based on the location identifier, wherein the first storage identifier identifies a storage volume that stores cryptographic keys of the key server;
• determining a second storage identifier that identifies a storage device or storage system that stores data at rest encrypted by the cryptographic keys;
• identifying a potential deadlock between the key server and the storage device or storage system based on the first storage identifier and the second storage identifier;
• controlling the key server based on the potential deadlock;
• and
• responsive to determining that a device request of the key server to access the second storage volume involves an initial setup of the key server or the second storage volume, rejecting the device request of the key server to the storage device or storage system.