Managing key encryption keys using a key wrapping tree

One or more storage devices containing processor readable code for programming one or more processors to perform a method for operating a data management system, the processor readable code comprising:

• processor readable code configured to identify an electronic file to be deleted from a solid-state drive;
• processor readable code configured to identify a first data encryption key that encrypted the electronic file stored using the solid-state drive;
• processor readable code configured to identify a first key encryption key that encrypted the first data encryption key;
• processor readable code configured to acquire the first key encryption key from a hard disk drive;
• processor readable code configured to generate a second key encryption key;
• processor readable code configured to decrypt a second data encryption key that encrypted a second electronic file stored using the solid-state drive using the first key encryption key;
• processor readable code configured to encrypt the second data encryption key using the second key encryption key;
• processor readable code configured to store the second key encryption key using the hard disk drive;
• processor readable code configured to delete the first key encryption key from the hard disk drive;
• processor readable code configured to delete the first data encryption key from the solid-state drive;
• and
• processor readable code configured to delete the electronic file from the solid-state drive.