Associating a data encryption keystore backup with a computer system

A method for associating a data encryption lockbox backup with a data storage system, the method comprising:

• generating a first set of software system stable values (SSV), the first set of SSV including a plurality of values wherein each value is derived from a data storage system component value unique to the data storage system;
• creating a lockbox configured to store the first set of SSV and a set of encryption keys associated with a corresponding respective set of data storage system drives, wherein the data storage system drives include a plurality of drives reserved for storage system management operations and are not configured for storing user data, wherein access to the lockbox requires providing a minimum number of SSV that match corresponding SSV in the first set of SSV, wherein the minimum number of SSV is equal to a first match value and less than the number of SSV in the first set;
• creating a backup copy of the lockbox, wherein access to the backup copy of the lockbox requires providing a minimum number of SSV that match the corresponding SSV in the first set of SSV, wherein the minimum number of SSV is equal to a second match value;
• and
• storing the backup copy of the lockbox at a remote location.