Abstract: According to an aspect, a first digital system splits a cryptography key into a first key part (S1) and a second key part (S2), stores S1 in a policy-controlled storage which permits storage according to access policies and stores S2 in a local storage of the first digital system. Upon identifying a requirement in a second digital system for the cryptography key, the first digital system configures for the policy-controlled storage a first policy permitting access of S1 to the second digital system and then sends S2 directly to the second digital system. The second digital system reconstructs the cryptography key by retrieving S1 from the policy-controlled storage based on the first policy and forming the cryptography key from the retrieved S1 and S2 received from the first digital system. Thus, a cryptography key is securely stored and used, without having any single point of attack.

Abstract: According to an aspect, a first digital system splits a cryptography key into a first key part (S1) and a second key part (S2), stores S1 in a policy-controlled storage which permits storage according to access policies and stores S2 in a local storage of the first digital system. Upon identifying a requirement in a second digital system for the cryptography key, the first digital system configures for the policy-controlled storage a first policy permitting access of S1 to the second digital system and then sends S2 directly to the second digital system. The second digital system reconstructs the cryptography key by retrieving S1 from the policy-controlled storage based on the first policy and forming the cryptography key from the retrieved S1 and S2 received from the first digital system. Thus, a cryptography key is securely stored and used, without having any single point of attack.

Abstract: A clustered network storage system includes a policy based storage efficiency management framework to allow users to more efficiently manage storage efficiency attributes on a plurality of storage objects in the clustered network storage system. The storage efficiency management framework includes a policy database for storing a plurality of polices, each of which includes a plurality of attributes. Each storage object in the clustered network storage system is assigned a policy. Storage efficiency operations can then be initiated by a storage efficiency engine according to the policies assigned to the storage objects by sending a single trigger to each node in the clustered network storage system and the storage efficiency engine determining on which storage objects to perform the storage efficiency operations.

Abstract: A clustered network storage system includes a management module and a resource allocation mechanism configured to allow remote management of node resources from the management module while preventing resource over-commitment due to the remote management. Preventing resource over-commitment includes conditionally granting access to the resources of a node according to a credit based system. Preventing resource over-commitment further includes scheduling jobs that access the resources of the node according to a prioritization scheme.

Abstract: A clustered network storage system includes a management module and a resource allocation mechanism configured to allow remote management of node resources from the management module while preventing resource over-commitment due to the remote management. Preventing resource over-commitment includes conditionally granting access to the resources of a node according to a credit based system. Preventing resource over-commitment further includes scheduling jobs that access the resources of the node according to a prioritization scheme.