HP UX Encrypted Volume and Filesystem (EVFS) Stopping the Evfs Subsystem, Evfsvol disable -a

3.Use the evfsvol disable command to disable EVFS operation for the volume as follows:

•To disable a single EVFS volume without a stored passphrase: evfsvol disable [-kkeyname] evfs_volume_path

You must be the volume owner or an authorized user for the volume to execute this command.

•To disable a single EVFS volume with a stored passphrase and an entry in the

/etc/evfs/evfstab file:

evfsvol disable -p evfs_volume_path

•To disable EVFS encryption and decryption for all volumes in the /etc/evfs/evfstab file that include a key ID field:

evfsvol disable -a

where:
-a	Causes EVFS to disable encryption and decryption for all volumes
	in the file /etc/evfs/evfstab.
-p	Causes EVFS to use a stored passphrase to disable encryption and
	decryption for the specified EVFS volume. The
	/etc/evfs/evfstab file must contain an entry for this volume
	with a key ID field.
-kkeyname	Specifies the key name. If you do not specify -kkeyname,
	evfspkey uses the user name as the key name.
	Valid value: An ASCII string, 1 - 255 characters long.

evfs_volume_path Specifies the absolute pathname for the EVFS volume device file, such as /dev/evfs/vg01/lvol5, /dev/evfs/vx/dsk/rootdg/vol05, or /dev/evfs/dsk/c2t0d1.

Stopping the EVFS Subsystem

The evfsadm stop command stops the EVFS subsystem and terminates all kernel EVFS threads.

Use the following procedure to stop the EVFS subsystem:

1.For data consistency, stop all applications accessing the data. You can use the fuser -cucommand to determine the processes accessing files, and the fuser -ckucommand to terminate the processes. See the fuser(1M) manpage for more information.

If the data is used by system processes, you might need to terminate the processes by changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M) for more information.

2.If you have a file system mounted on the EVFS volume, use the umount command to unmount the file system. See the umount(1M) manpage for more information.

3.Disable all the EVFS volumes using the evfsvol disable command, as described in “Disabling Encryption/Decryption Access to EVFS Volumes” (page 81). You must be the volume owner or an authorized user for the volume to disable the volume.

4.Enter the following evfsadm stop command: evfsadm stop

82 Administering EVFS