A data security system (500) is provided that includes: verifying the user (122) by providing user identification (202) to retrieve an authentication key (118); employing the authentication key (118) for retrieving an encryption key (116); and employing the encryption key (116) for allowing unencrypted communication through a storage subsystem (106) between a host computer system (120) and a storage media (112).
