HP UX Encrypted Volume and Filesystem (EVFS) Perform inline encryption Start inline encryption

The options field must contain the keyword boot_local, boot_local2, or boot_remote.

See “Step 5: (Optional) Configuring the Autostart Feature” (page 62) for more information.

6.Back up your configuration. Back up all files in the /etc/evfs directory and all subdirectories below it.

Option 2: Converting an Existing Volume into an EVFS Volume (Inline Encryption)

1.Prepare the file system and data.

1.Verify the file systems or volumes you want to secure with EVFS are suitable for encryption.

2.For data consistency, stop all applications accessing the data.

3.Back up the data on the volume.

4.Unmount the file system:

#umount file_system

5.Extend the volume if there is no spare disk space at the end of the volume. Inline encryption requires 3MB of spare disk space.

6.Map the volume to an EVFS volume:

#evfsadm map volume_name

2.Perform inline encryption.

1.Start inline encryption:

#evfsvol iencrypt [-f] [-k keyname] [-c cipher] evfs_volume_path

2.Enable the EVFS volume:

#evfsvol enable evfs_volume_path

3.Mount the file system to the EVFS volume:

#mount evfs_volume_path file_system

3.Verify EVFS operation. Use the following commands:

• evfsadm stat -a

• evfsvol display evfs_volume_path

4.(Optional) Configure the EVFS autostart feature. The autostart feature enables you to enable EVFS encryption and mount file systems on EVFS volumes at system startup without manual intervention. You must have stored passphrases to use the autostart feature.

To configure the autostart feature, edit the /etc/rc.config.d/evfs file to contain the following entry:

EVFS_ENABLED = 1

You must also edit the /etc/evfs/evfstab file. The syntax for each entry is as follows: v volume_path evfs_volume_path user_name.key_name options

The options field must contain the keyword boot_local, boot_local2, or boot_remote.

See “Step 5: (Optional) Configuring the Autostart Feature” (page 62) for more information.

5.Back up your configuration. Back up all files in the /etc/evfs directory and all subdirectories below it.

148 EVFS Quick Reference