HP UX Encrypted Volume and Filesystem (EVFS) manual Preparing the File System and Data

Step 1: Preparing the File System and Data

a.Verify the file systems or volumes you want to secure with EVFS are suitable for encryption. You cannot use EVFS with the following objects:

•Files or disk areas used during system boot. This includes the following objects:

—the root disk (/)

—the boot disk

—the HP-UX kernel directory (/stand)

—the /usr directory"

EVFS cannot decrypt the kernel or other data before the system boots.

CAUTION: Encrypting the boot disk makes the boot disk unusable and prevents you from booting the system.

•Swap space (swap devices or file swap space).

CAUTION: Encrypting swap space can cause the system to panic.

• Dump devices.

b.For data consistency, stop all applications accessing the data. You can use the fuser -cucommand to determine the processes accessing files, and the fuser -ckucommand to terminate the processes. See fuser(1M) for more information.

If the data is used by system processes, you might need to terminate the processes by changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M) for more information.

c.Back up the data on the volume. This ensures data recovery is possible if an unexpected event occurs before completion of the operation.

d.Unmount the file system:

# umount file_system

e.Extend the volume if there is no spare disk space at the end of the volume. 3 MB of spare disk space are required at the end of the volume. Extend the volume by using the lvextend command on an LVM volume, or the vxassist command on a VXVM volume. If you do not know if there is spare disk space at the end of the volume, you can check if there is still space available for you to extend the volume by using the vgdisplay command on a LVM volume group, or the vxdg command on a VXVM disk group that the volume belongs to.

f.Map the regular volume to an EVFS volume:

# evfsadm map volume_name

66 Configuring an EVFS Volume