Upgrading from EVFS v1.0 to EVFS v1.1

34

3 Preparing EVFS for Configuration

35

Verifying for Preconfiguration

35

Preparation Overview

36

Step 1: Configuring an Alternate EVFS Pseudo-User

37

Step 1a: Setting the evfs_user Attribute

37

Example

37

Step 1b: Creating the User Group

37

Example

37

Step 1c: Creating the EVFS Pseudo-User Account

37

Example

37

Step 2: (Optional) Configuring Alternate Key Database Directories

39

Syntax for pub_key, priv_key, and pass_key Attribute Statements

39

Key Storage Directory Requirements

40

Default pub_key, priv_key and pass_key Attribute Statements

40

Example: Alternate Directory for Public Keys

41

Example: NFS Directory for Public and Private Keys

41

Example: Fallback Directory for Nonprivileged Users

41

Step 3: (Optional) Modifying EVFS Global Parameters

42

Step 4: Starting the EVFS Subsystem

43

Example

43

Step 5: Creating User Key Pairs

44

Guidelines for Creating User Keys

44

Creating Keys for EVFS Volume Owners

44

Example

45

Creating Recovery Keys

45

Storing the recovery user's Private Key

45

Examples

45

Creating Keys for authorized users

46

Examples

46

Examples

47

User Session

47

4 Configuring an EVFS Volume

49

Configuration Overview

49

Option 1: Creating a New EVFS Volume

50

Step 1: Configuring an EVFS Volume

51

Step 1a: Creating an LVM or VxVM Volume for EVFS

51

Examples

51

Step 1b: Creating EVFS Volume Device Files

51

Examples

52

Step 1c: Creating the EMD

52

Example

53

Step 1d: (Optional) Adding Recovery Keys and authorized user Keys

53

Step 1e: Enabling the EVFS Volume

54

Example

55

Step 2: Creating and Mounting a File System on an EVFS Volume

56

Step 2a: Creating a New File System with newfs

56

Example

56

Step 2b: (Optional) Using fsck to Check the File Volume

56

Example

56

Step 2c: Creating the Mount Point

57

4Table of Contents

Page 4
Image 4
HP UX Encrypted Volume and Filesystem (EVFS) manual Preparing Evfs for Configuration, Upgrading from Evfs v1.0 to Evfs