Communication between key manager and storage subsystem kernel via management console

摘要

System, computer program product, and method embodiments for communication between a kernel operational on a storage subsystem and a key manager (KM) through a hardware management console (HMC) to provide encryption support are provided. In one embodiment, an event request is initiated by the kernel to the KM to execute an event flow. Pursuant to a communication request by the kernel to the HMC, a socket of the HMC is opened along a communication path between the KM and the kernel according to an event flow type selected by the KM for the event flow. Data including a data payload is sent by the KM to the kernel, the data payload corresponding to the selected event flow type.

主权项

1. A method of communication, using a processor device, between a kernel operational on a storage subsystem and a key manager (KM) through a hardware management console (HMC) to provide encryption support, comprising:
pursuant to a data request by the kernel to the KM, sending data including a data payload by the KM to the kernel to provide encryption support, the data payload corresponding to an event flow suborder type selected by the kernel for an event flow; and pursuant to a communication request by the kernel to the HMC, opening a socket of the HMC along a communication path between the KM and the kernel according to an additional event flow suborder type selected by the kernel for the event flow.