BainwoodHuang
Secured virtual storage appliance installation image
An installation image of a virtual storage appliance (VSA) is protected by initiating VSA installation from an archive image establishing a pre-installation operating state. The archive image includes an installation image with a lockbox storing a first key for accessing the installation image. The lockbox is encrypted using a second key derived from a stable system value (SSV), such as data for device partitioning, obtainable from an execution environment in the pre-installation operating state. During installation, the SSV is obtained and used in decrypting the lockbox to retrieve the first key and use the installation image to install the VSA. The VSA is installed in a manner establishing a post-installation operating in which the SSV is no longer obtainable from the execution environment, e.g., due to changing the device partition information. An SSV obtained from the partition information post-installation does not yield the key for decrypting the lockbox, protecting the installed image.
EMC IP Holding Company LLC
G G G H H H
G06F G06F G06F H04L H04L H04L
inventional additional inventional inventional inventional inventional
Benjamin P. Michael L. Weixing Gregory W. Jochen F.
Kelley Burriss Wang Lazar De Smet