Redundant key server encryption envionment

A method, comprising:

• transmitting, by a key server, public keys associated with the key server and at least one device to at least one remote key server;
• receiving, by the key server, from the at least one remote key server public keys associated with the at least one remote key server;
• receiving, by the key server, a request for an encryption key from a requesting device comprising one of the at least one device;
• generating, by the key server, the encryption key for use by the requesting device to unlock a storage;
• generating, by the key server, a first wrapped encryption key by encrypting the encryption key with a requesting device public key associated with the requesting device;
• generating, by the key server, a second wrapped encryption key by encrypting the encryption key with a public key associated with the key server;
• generating at least one additional wrapped encryption key for each of the at least one remote key server by encrypting the encryption key with the at least one public key provided by the at least one remote key server;
• and
• transmitting, to the requesting device, the first, second and the at least one additional wrapped encryption key to the requesting device.

A method, comprising:

• sending an encryption key request for an encryption key to use to a selected key server comprising one of at least two key servers;
• receiving, from the selected key server, a first wrapped encryption key comprising an encryption key encrypted with a device public key for which the device has a device private key to decrypt data encrypted with the device public key, a second wrapped encryption key comprising the encryption key encrypted with a public key for which the selected key server maintains a corresponding private key, and at least one additional wrapped encryption key encrypted with a public key for which the key server other than the selected key server has a corresponding key server private key;
• and
• decrypting the first wrapped encryption key to obtain the encryption key decrypted to use for encryption operations.