Key protector for a storage volume using multiple keys

A method of accessing an encrypted storage volume, the method comprising:

• obtaining a private key of an entity associated with a key protector stored on the encrypted storage volume, the private key being of a public/private key pair;
• obtaining, based at least in part on the private key, an intermediate key for encrypting and decrypting a volume master key;
• and
• using the intermediate key by a computing device to decrypt the volume master key from the key protector for decrypting one or more volume encryption keys that are used to decrypt the storage volume.

A computer-readable storage device that includes computer-executable instructions, which when executed by a computing device, cause the computing device to:

• generate an intermediate key with a computing device;
• protect, based at least in part on a public key of a public/private key pair of an entity, the intermediate key for encrypting and decrypting a volume master key;
• encrypt based at least in part on the intermediate key, the volume master key for encrypting and decrypting one or more volume encryption keys that are used to encrypt the storage volume;
• and
• store a key protector for the storage volume, the key protector being associated with the entity and including both the encrypted volume master key and the intermediate key.