HP UX Encrypted Volume and Filesystem (EVFS) manual Restoring Backup Media

Restoring Backup Media

This section describes how to restore backup media, and describes the following procedures:

•“Restoring Encrypted Backup Media from a Non-EVFS Device to an EVFS Volume” (page 125)

•“Restoring Backup Data from an EVFS Volume to an EVFS Volume” (page 126)

Restoring Encrypted Backup Media from a Non-EVFS Device to an EVFS Volume

When restoring encrypted backup media created on a non-EVFS device (such as a tape device) that contains an EVFS volume, the target volume to which you are restoring the data must meet the following criteria:

•The target volume must be an EVFS volume. If you do not have an EVFS volume, use the procedure described in “Step 1: Configuring an EVFS Volume” (page 51) to create an EVFS volume.

•The EVFS volume must have EVFS disabled.

CAUTION: If you do not disable encryption and decryption on the target volume, EVFS encrypts the encrypted data you restore (the data is encrypted twice).

To use this procedure, you must have the appropriate file permissions to access the EVFS volume device file and meet at least one of the following criteria:

•You are the volume owner.

•You are an authorized user for the volume.

•A stored passphrase exists for one of the volume's user key pairs, and you know the key ID for the key pair.

Use the following procedure to restore encrypted backup media:

1.If the user key pairs used with the source EVFS volume are not available on the system, restore them. See“Restoring User Keys” (page 84) for information on restoring EVFS user key pairs.

2.For data consistency, suspend or stop any applications accessing data on the target volume. You can use the fuser -cucommand to determine the processes accessing files, and the fuser -ckucommand to terminate the processes.

If the data is used by system processes, you might need to terminate the processes by changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M) for more information.

3.If a file system exists on the target volume, use the umount command to unmount the file system on the target volume. See umount(1M) for more information.

4.Use the following command to disable encryption and decryption access to the target volume: evfsvol disable [-kkeyname] evfs_volume_path

See “Disabling Encryption/Decryption Access to EVFS Volumes” (page 81) for more information.

5.Use the following command to enable raw access to the target volume: evfsvol raw evfs_volume_path

Restoring Backup Media 125