HP UX Encrypted Volume and Filesystem (EVFS) manual User

1.Verify the directory structure for the key database, and re-create it if necessary. By default, EVFS stores the user key database in subdirectories below the /etc/evfs/pkey directory, with a subdirectory for each user. The administrator can configure alternate database directory or directories using the pkey attribute in the /etc/evfs/evfs.conf file.

HP recommends that the primary directory is writable only by superusers. For example, the /etc/evfs/pkey directory is installed with the following permissions, owner, and group:

drwxr-xr-x 4 bin bin 96 Mar 16 17:26 pkey

If you configure a fallback directory to allow users without superuser privileges to create keys, the fallback directory must allow the appropriate users to read, write, and execute the contents.

2.Create the appropriate directory for each user, such as /etc/evfs/pkey/root. Each directory must have the following permissions, owner, and group:

drwxr-xr-x 2 user sys 96 Mar 16 17:27 user

3.Create a directory to store the recovery keys. If you are using the default name for the EVFS pseudo-user account and the default key storage directory, create the /etc/evfs/pkey/evfs directory (or a subdirectory under the key storage directory using the EVFS pseudo-user name) with the following permissions, owner, and group:

drwxr-xr-x 2 bin bin 96 Mar 16 17:27 evfs

Managing EVFS Keys and Users 85