HP UX Encrypted Volume and Filesystem (EVFS) Managing Evfs Keys and Users, Restoring User Keys

Managing EVFS Keys and Users

This section describes the following procedures for managing EVFS keys and users:

•“Displaying Key IDs for an EVFS Volume” (page 84)

•“Restoring User Keys” (page 84)

•“Changing Owner Keys for an EVFS Volume” (page 86)

•“Recovering from Problems with Owner Keys” (page 87)

•“Removing Keys from an EVFS Volume” (page 87)

•“Removing User Keys or Stored Passphrase from the EVFS Key Database” (page 87)

•“Changing the Passphrase for a Key” (page 87)

•“Creating or Changing a Stored Passphrase for an Existing Key” (page 88)

Displaying Key IDs for an EVFS Volume

Use the following evfsvol display command to display EMD information for EVFS volumes, including the owner key ID, recovery key IDs, and authorized user key IDs. The evfsvol display command also displays operating parameters for the EVFS volume, including the volume encryption algorithm and the underlying LVM, VxVM, or physical volume device file name.

Syntax

evfsvol display [-aevfs_volume_path]

where:
-a	Displays the EMD information for all configured EVFS volumes.
-evfs_volume_path	Specifies the absolute pathname for the EVFS volume device file,
	such as /dev/evfs/vg01/lvol5,
	/dev/evfs/vx/dsk/rootdg/vol05, or
	/dev/evfs/dsk/c2t0d1. The evfsvol utility displays the EMD
	information for the volume.

Example

The output for the evfsvol display evfs_volume_path is similar to the following:

#evfsvol display /dev/evfs/vg01/lvol5

EVFS Volume Name:	/dev/evfs/vg01/lvol5
Mapped Volume Name:	/dev/vg01/lvol5
EVFS Volume State:	enabled
EMD Size (Kbytes):	520
Max User Envelopes:	1024
Data Encryption Cipher:	aes-128-cbc
Digest:	sha1
Owner Key ID:	root.rootkey1
Recovery Agent Key IDs:	evfs.evfs
Total Recovery Agent Keys:	1
User Key IDs:	root.admink
Total User Keys:	1

The Owner Key ID, Recovery Agent Key IDs, and User Key IDs fields show the key IDs configured for the volume.

Restoring User Keys

Use the following procedure to restore user key files from backup media:

84 Administering EVFS