HP UX Encrypted Volume and Filesystem (EVFS) manual Opening Raw Access to Evfs Volumes

Opening Raw Access to EVFS Volumes

Use the following evfsvol raw command to open an EVFS volume for raw access. When an EVFS volume is open for raw access, EVFS does not decrypt data read from the volume and does not encrypt data written to the volume. Entities reading data from the EVFS volume receive encrypted data. Entities writing data to the EVFS volume write directly to the underlying disk; EVFS does not encrypt the text.

CAUTION: Writing data to or reading data from an EVFS volume when it is opened for raw access can cause data corruption. HP recommends that you use this operation only when creating encrypted backup media or restoring encrypted backup media, as described in “Backing Up EVFS Volumes” (page 102).

Use the following procedure to open raw access to an EVFS volume:

1.Disable encrypted and decrypted access to the EVFS volume using the evfsvol disable command, as described in “Disabling Encryption/Decryption Access to EVFS Volumes” (page 81). You must be the volume owner or an authorized user for the volume to disable the volume.

2.Enter the evfsvol raw command. The syntax is as follows: evfsvol raw evfs_volume_path

where:

evfs_volume_path Specifies the absolute pathname for the EVFS volume device file, such as /dev/evfs/vg01/lvol5,

/dev/evfs/vx/dsk/rootdg/vol05, or /dev/evfs/dsk/c2t0d1.

Closing Raw Access to EVFS Volumes

Use the following evfsvol close command to close raw access to a volume. After you close raw access, you can enable encrypted and decrypted access to the volume using the evfsvol enable command.

You must be the volume owner or an authorized user for the volume to execute the evfsvol close command.

evfsvol close evfs_volume_path

where:

evfs_volume_path Specifies the absolute pathname for the EVFS volume device file, such as /dev/evfs/vg01/lvol5, /dev/evfs/vx/dsk/rootdg/vol05, or /dev/evfs/dsk/c2t0d1.

Starting and Stopping EVFS 83