Enforcing use of chipset key management services for encrypted storage devices

A system comprising:

• a first platform including a first processor, a Manageability Engine (ME) to manage one or more encryption keys of the first platform, an encryption engine to encrypt data on the first platform, and a first memory having stored therein a plurality of instructions that, in response to being executed by the first processor, causes the first processor to:
• encrypt data stored on a first storage device of the first platform using a first encryption key,
• encrypt, by an encryption mechanism other than the encryption engine, data stored on a second storage device of the first platform using a second encryption key,
• generate a first migration token,
• encrypt the first encryption key with the first migration token to generate a first platform-independent migration key,
• store the first platform-independent migration key in the first storage device,
• store the first migration token in a remote storage location, and
• migrate the first storage device from the first platform to a second platform;
• and
• the second platform including a second processor and a second memory having stored therein a plurality of instructions that, in response to being executed by the second processor, causes the second processor to:
• retrieve the first migration token from the remote storage location,
• decrypt the first platform-independent migration key with the retrieved first migration token to obtain the first encryption key, and
• decrypt the data stored on the first storage device using the first encryption key.