Virtual machine allocation and migration

A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a first hardware device implements a virtual machine allocation and migration improvement method, said method comprising:

• initiating, by said processor, a migration process for migrating database files of a virtual machine from said first hardware device to a second hardware device;
• transmitting, by said processor in response to said initiating, a checkpoint and restart command to a first hypervisor of said first hardware device;
• receiving, by said processor from a first enclave of a memory structure of said first hardware device, a request for a cryptographic key from a memory encryption engine of said processor;
• transmitting, by said processor in response to said receiving said request, said cryptographic key to said first enclave;
• encrypting, by said processor via usage of said cryptographic key, said first enclave resulting in a first encrypted enclave;
• generating, by said processor executing said first encrypted enclave, a data file comprising said database files;
• disconnecting, by said processor, said first encrypted enclave from said first hardware device;
• destroying, by said processor, said first encrypted enclave;
• and
• executing, by said processor in response to enabling said checkpoint and restart command, checkpoint and restart code for restarting said first hardware device.

A first hardware device comprising a processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the computer processor implements a virtual machine allocation and migration improvement method comprising:

• initiating, by said processor, a migration process for migrating database files of a virtual machine from said first hardware device to a second hardware device;
• transmitting, by said processor in response to said initiating, a checkpoint and restart command to a first hypervisor of said first hardware device;
• receiving, by said processor from a first enclave of a memory structure of said first hardware device, a request for a cryptographic key from a memory encryption engine of said processor;
• transmitting, by said processor in response to said receiving said request, said cryptographic key to said first enclave;
• encrypting, by said processor via usage of said cryptographic key, said first enclave resulting in a first encrypted enclave;
• generating, by said processor executing said first encrypted enclave, a data file comprising said database files;
• disconnecting, by said processor, said first encrypted enclave from said first hardware device;
• destroying, by said processor, said first encrypted enclave;
• and
• executing, by said processor in response to enabling said checkpoint and restart command, checkpoint and restart code for restarting said first hardware device.