HP UX Encrypted Volume and Filesystem (EVFS) manual Backups Using VxVM Mirrored Volumes

Backups Using VxVM Mirrored Volumes

If you have VxVM mirrored volumes, you can back up the EVFS volumes on line, without disabling the EVFS volume or interrupting access to the data.

This section describes the following procedures:

•“Creating Encrypted Backup Media on a Non-EVFS Device (VxVM Mirrored Volumes)” (page 112)

•“Creating Encrypted Backup Media on a Second EVFS Volume Using a Block Device Utility (VxVM Mirrored Volumes)” (page 115)

•“Creating Encrypted Backup Media on a Second EVFS Volume Using a File Utility (VxVM Mirrored Volumes)” (page 117)

•“Creating Cleartext Backup Media (VxVM Mirrored Volumes)” (page 120)

Creating Encrypted Backup Media on a Non-EVFS Device (VxVM Mirrored Volumes)

If you have VxVM mirrored volumes, use the following procedure to perform online encrypted backups to a non-EVFS target device, such as a tape drive. You must use a block device backup utility, such as dd.

You must have the appropriate file permissions to access the EVFS volume device file to use this procedure.

1.Configure the mirror, if you have not already done so. Create the mirror by using the vxassist mirror command or by creating a plex and attaching it to a VxVM volume

using the vxplex att command. Configure EVFS on the VxVM volume using the evfsadm map and evfsvol create commands. Enable the EVFS volume using the evfsvol enable command, and migrate data to the EVFS volume if necessary.

2.Create a backup copy of the user key database (user key pairs and any passphrase files) if a copy does not already exist. Determine the directories used for the key database by checking the pkey attribute statement in the /etc/evfs/evfs.conf file, and back up the database. By default, EVFS stores the user key database in subdirectories below the /etc/evfs/pkey directory.

If you are restoring the data to another system, you must know the passphrase for the volume owner's private key. Stored passphrase files are encrypted with system-specific information, so a stored passphrase created on one system is unusable on any other system.

3.Dissociate a plex from the volume using the vxplex dis command. In the following example, the vol05 volume in the testdg disk group has two plexes, vol05–01and vol05–02, and the administrator dissociates the vol05–02plex to use as the source for the backup:

#vxplex -g testdg dis -v vol05 vol05-02

4.Use the vxmake command to create a temporary volume for the backup, such as backupvol, with the dissociated plex. For example:

#vxmake -g testdg -U gen vol backupvol plex=vol05-02

5.Start the backup VxVM volume using the vxvol start command. For example:

#vxvol -g testdg start backupvol

6.Map the backup VxVM volume to EVFS. For example:

#evfsvol map /dev/vx/dsk/testdg/backupvol

This creates the device files /dev/evfs/vx/dsk/testdg/backupvol and /dev/evfs/vx/rdsk/testdg/backupvol.

7.Do not create an EMD area for the EVFS volume. The backup volume inherits a copy of the EMD from the original volume. However, because the backup volume inherits its EMD, the

112 Backing Up and Restoring Data on EVFS Volumes