HP UX Encrypted Volume and Filesystem (EVFS) manual Evfsvol Cannot Retrieve Private Key

evfsvol Cannot Retrieve Private Key

Symptom

An evfsvol command fails, and evfsvol displays a message similar to the following:

# evfsvol disable /dev/evfs/vg01/lvol5

evfsvol: disable error: cannot retrieve private key "root.root", key loading failure

Description

The evfsvol utility cannot retrieve a user's private key to perform an operation on an EVFS volume.

Solution

If you do not specify a key name using the -kkeyname option, evfsvol uses the default key name, which is the user's account name. In the previous output, the root user entered the evfsvol command, so evfsvol searched for the private key owned by root with the key name root (root.root). If you are using an alternate key name, use the -kkeyname option to specify the key name.

If you specified the correct key name, determine the directories used for the key database by checking the priv_key and pass_key attribute statements in the /etc/evfs/evfs.conf file. By default, EVFS stores the user key database in subdirectories below the /etc/evfs/pkey directory. Verify that the attribute statement contains no line breaks. Verify the file permissions, owner and group for the key database directories, as described in the section, “Restoring User Keys” (page 84).

evfsvol create Fails, EVFS Device File Not Found in evfstab File

Symptom

The evfsvol create command fails and evfsvol displays a message similar to the following:

# evfsvol create /dev/evfs/vg01/lvol5

evfsvol: create error: /dev/evfs/vg01/lvol5 not found in evfstab file

Description

The evfsvol create command fails if you do not have an entry for the EVFS volume in the /etc/evfs/evfstab file.

Solution

Add an entry for the EVFS volume to the /etc/evfs/evfstab file. The syntax for each entry is as follows:

v volume_path /dev/evfs/evfs_volume_path [user_name.key_name] [options]

See the evfstab(4) man page for more information.

evfsvol create Fails, Valid EMD Already Exists

Symptom

The evfsvol create command fails and evfsvol displays a message similar to the following:

# evfsvol create /dev/evfs/vg01/lvol5

evfsvol: create error: a valid EMD already exists in "/dev/evfs/vg01/lvol5", use the -f option to override it

136 Troubleshooting EVFS