OCP Lock
Overview
OCP Lock (Layered Open-source Cryptographic Key Management) is an OCP security standard that provides cryptographic key management for both storage devices (drives) and host systems. Unlike device-only key management approaches, OCP Lock addresses the full key lifecycle across the host-device boundary, making it applicable to any storage device type regardless of interface or form factor.
Key properties:
- Applicable to any storage device (SSDs, HDDs, NVMe, etc.)
- Manages keys on both the drive side and the host side
- Included in Caliptra 2.1 as part of the open-source hardware root-of-trust implementation
- Complemented by a Trusted Computing Group host interface specification defining how the host system interacts with OCP Lock
OCP Lock enables hyperscale operators to implement consistent, open-source cryptographic key management across their entire storage fleet without proprietary vendor lock-in.
Sign in to read the full article.
Sign In