1. A method for managing embedded and external key management systems in a data storage system, the method comprising: selecting an embedded encryption key management system; generating a first unique signature for use with a local lockbox, wherein the signature generated using a time parameter and a randomly generated value; generating, via data storage system processing circuitry, a minimum number of unique data storage system values, the unique data storage system values associated with the data storage system, creating a backup copy of the lockbox and storing the backup copy of the lockbox in a local keystone LUN (logical unit number), wherein access to the backup copy of the lockbox requires providing the minimum number of unique data storage system values; switching to an external encryption key management system; generating a second unique signature for use with the local lockbox, wherein the signature generated using a time parameter and a randomly generated value; switching to the embedded encryption key management system; and generating a third unique signature for use with the local lockbox, wherein the signature is generated using a time parameter and a randomly generated value.