Hypervisor protected key

A computer system for cryptography, the computer system comprising:

• one or more processors, one or more computer-readable memories, and program instructions stored on at least one of the one or more computer-readable memories for execution by at least one of the one or more processors to cause the computer system to:
• register a guest virtual server with a trusted hypervisor by using guest credentials,
• generate a guest wrapping key associated with the guest credentials,
• generate in the trusted hypervisor a satellite virtual server instance that shares a master key with the virtual guest server,
• pass a copy of the guest wrapping key to the satellite virtual server instance,
• wrap a random guest key with the guest wrapping key, thereby producing a wrapped guest key, and
• rewrap the wrapped guest key with the master key to form a protected guest key.

A computer program product for cryptography, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by a processor to cause the processor to:

• register a guest virtual server with a trusted hypervisor by using guest credentials,
• generate a guest wrapping key associated with the guest credentials,
• generate in the trusted hypervisor a satellite virtual server instance that shares a master key with the virtual guest server,
• pass a copy of the guest wrapping key to the satellite virtual server instance,
• wrap a random guest key with the guest wrapping key, thereby producing a wrapped guest key, and
• rewrap the wrapped guest key with the master key to form a protected guest key.