公开(公告)号：US12021981B2

公开(公告)日：2024-06-25

申请号：US17684432

申请日：2022-03-02

Applicant: VMware, Inc.

Inventor： Wenguang Wang ,  Abhay Kuamr Jain ,  Ruiling Dou ,  Tao Xie ,  Xin Li ,  Chandrakanth Gadhiraju ,  Kevin Rayfeng Li ,  Satish Pudi

IPC: H04L9/08 ,  G06F21/60

CPC classification number: H04L9/0891 ,  G06F21/602

Abstract: An example method for a first host, being an owner of an object stored in a virtual storage area network (vSAN) cluster, to perform encryption and decryption operations during a rekey in the vSAN cluster is disclosed. The method includes obtaining a first encryption key and a first key identifier (ID) of the first encryption key; transmitting the first key ID and an active key index to a second host; using the first encryption key to perform encryption and decryption operations; and in response to a determination of receiving a key change notification from a master node of the vSAN cluster, terminating a connection with the second host.