HP UX Encrypted Volume and Filesystem (EVFS) manual Problem Scenarios, Evfspkey Cannot Store Keys

Problem Scenarios

This section describes the following problem scenarios and solutions for the scenarios:

•“evfspkey Cannot Generate Key Pairs” (page 135)

•“evfspkey Cannot Store Keys” (page 135)

•“evfsvol Cannot Retrieve Private Key” (page 136)

•“evfsvol create Fails, EVFS Device File Not Found in evfstab File” (page 136)

•“evfsvol create Fails, Valid EMD Already Exists” (page 136)

•“evfsvol disable Fails, EVFS Volume Is Busy” (page 137)

•“evfsadm map Fails, Invalid Device” (page 137)

•“EMD Is Dirty” (page 138)

evfspkey Cannot Generate Key Pairs

Symptom

The evfspkey keygen command fails and evfspkey displays a message similar to the following:

evfspkey: keygen error: cannot generate key pair

Description

The evfspkey utility cannot generate a key pair because no cryptography threads are running.

Solution

Use the evfsadm start command to start the EVFS subsystem and kernel cryptography threads.

evfspkey Cannot Store Keys

Symptom

The evfspkey keygen command fails and evfspkey displays a message similar to the following:

evfspkey: keygen error: cannot store public key "user_name.key_name", key loading failure

Description

The evfspkey utility cannot store a public key file in the EVFS key database.

Solution

Verify that the account exists for the owner of the key pair. If you are creating a recovery key pair, verify that the EVFS pseudo-user account exists. The user name for the EVFS pseudo-user is set using the evfs_user attribute in the file /etc/evfs/evfs.conf. The default name is evfs.

Determine the directories used for the key database by checking the pub_key attribute statement in the /etc/evfs/evfs.conf file. By default, EVFS stores the user key database in subdirectories below the /etc/evfs/pkey directory. Verify that the attribute statement contains no line breaks. Verify the file permissions, owner and group for the directories, as described in the section, “Restoring User Keys” (page 84).

Problem Scenarios 135