HP UX Encrypted Volume and Filesystem (EVFS) Optional Migrating Existing Data to an Evfs Volume

#strings /dev/vg01/lvol5 grep "TOP SECRET"

(The strings command does not find the string "TOP SECRET")

#evfsvol close /dev/evfs/vg01/lvol5

#evfsvol enable /dev/evfs/vg01/lvol5

Enter user passphrase: (enter the passphrase)

#mount -F vxfs /dev/evfs/vg01/lvol5 /opt/encrypted_data

Step 4: (Optional) Migrating Existing Data to an EVFS Volume

Use the following procedure to migrate an existing directory of data to the EVFS volume:

a.For data consistency, stop all applications accessing the data. You can use the fuser -cucommand to determine the processes accessing files, and the fuser -ckucommand to terminate the processes. See fuser(1M) for more information.

If the data is used by system processes, you might need to terminate the processes by changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M) for more information.

b.(Optional) Create a backup of the existing data.

c.Use the cp command or other utility to copy the data from the existing files to an EVFS volume.

d.(Optional) Remove the old files or directories. If you migrated all the data from a file system, you can unmount the old file system. See umount(1M) for more information.

e.(Optional) If you unmounted a file system in the previous step, remove the entry for the file system from the /etc/fstab file.

f.(Optional) Use the ln command to create a symbolic link from the old directory to the appropriate directory on the encrypted volume. See ln(4) for more information.

g.Restart applications that use the data as needed.

Example

In the following example, the /opt/encrypted_data directory is located on an EVFS volume has already been created and enabled.

#fuser -cu /opt/my_data

#fuser -cku /opt/my_data

#cp -R /opt/my_data/* /opt/encrypted_data

#rm -r /opt/mydata

(If /opt/mydata was a file system, you would unmount it instead and remove the corresponding entry from the /etc/fstab file.)

#ln -s /opt/encrypted_data /opt/my_data

Option 1: Creating a New EVFS Volume 61