Full volume encryption in a clustered environment

A method for sharing a cluster key table, the method comprising the steps of:

• receiving a first key associated with an encrypted volume that was added to a cluster of computing devices, the first key enabling the computer-executable instructions to decrypt the encrypted volume, the first key being received as an encrypted first key which can be decrypted by a second key that is specific to a computing device that is executing the computer-executable instructions, the computing device being one of the cluster of computing devices;
• adding an entry corresponding to the encrypted volume to a locally-maintained version of the cluster key table, the entry comprising an identification of the encrypted volume and the encrypted first key;
• requesting decryption of the encrypted first key;
• generating a version of the cluster key table for sharing with other computing devices of the cluster of computing devices, the version of the cluster key table for sharing comprising an entry corresponding to the encrypted volume, the entry comprising the identification of the encrypted volume and the decrypted first key;
• requesting transmission of the version of the cluster key table for sharing to at least one other computing device of the cluster of computing devices;
• and
• discarding the version of the cluster key table for sharing.

A system comprising:

• a first computing device;
• a first encrypted volume;
• and
• a second computing device, the second computing device comprising one or more computer-readable storage media comprising computer-executable instructions directed to steps comprising:
• receiving a first key associated with the first encrypted volume, the first key enabling the second computing device to decrypt the encrypted volume, the first key being received as an encrypted first key which can be decrypted by a second key that is specific to the second computing device;
• adding an entry corresponding to the first encrypted volume to a locally-maintained version of a cluster key table, maintained locally on the second computing device, the entry comprising an identification of the first encrypted volume and the encrypted first key;
• requesting decryption of the encrypted first key;
• generating a version of the cluster key table for sharing with the first computing devices, the version of the cluster key table for sharing comprising an entry corresponding to the first encrypted volume, the entry comprising the identification of the first encrypted volume and the decrypted first key;
• requesting transmission of the version of the cluster key table for sharing to the first computing device;
• and
• discarding the version of the cluster key table for sharing.