Encrypted Volume and File System v1.1 Administrator's Guide

Creating Cleartext Backup Media (LVM Mirrored Volumes)
If you have mirrored LVM volumes, you can create cleartext backup media using the procedure
described in “Creating Encrypted Backup Media on a Second EVFS Volume Using a Block Device
Utility (LVM Mirrored Volumes)” (page 107) or “Creating Encrypted Backup Media on a Second
EVFS Volume Using a File Utility (LVM Mirrored Volumes)” (page 109). However, instead of
using a second EVFS volume as the target for the backup utility, use a non-EVFS device as the
target. In both cases, the source EVFS volume is enabled when you execute the backup utility,
so the backup utility receives the data in cleartext.
Example: Block Device Utility
In the following example, the administrator splits the /dev/vg01/lvol5 mirror volume and
creates the /dev/vg01/lvol5backupvolume. The target is the /dev/rmt/0m tape device.
The dd command receives cleartext from the source EVFS volume.
# lvsplit –s backup /dev/vg01/lvol5 (LVM creates the /dev/vg01/lvol5backup volume.)
# evfsvol map /dev/vg01/lvol5backup
# evfsvol check -r /dev/evfs/vg01/lvol5backup
# evfsvol enable -k mykey /dev/evfs/vg01/lvol5backup (evfsvol prompts for
a passphrase if there is no stored passphrase.)
# dd bs=64k if=/dev/evfs/vg01/lvol5backup of=/dev/rmt/0m
# evfsvol disable -k mykey /dev/evfs/vg01/lvol5backup (evfsvol prompts for
a passphrase if there is no stored passphrase.)
# evfsadm unmap /dev/evfs/vg01/lvol5backup
# lvmerge /dev/vg01/lvol5backup /dev/vg01/lvol5
Example: File Utility
In the following example, the administrator splits the /dev/vg01/lvol5 mirror volume, creates
the /dev/vg01/lvol5backup volume, and mounts the file system on
/opt/evfs/backup_source. The target is the non-encrypted directory
/opt/foo/backup_target. The cp command receives cleartext from the source EVFS volume.
# lvsplit –s backup /dev/vg01/lvol5 (LVM creates the /dev/vg01/lvol5backup volume.)
# evfsvol map /dev/vg01/lvol5backup
# evfsvol check -r /dev/evfs/vg01/lvol5backup
# evfsvol enable -k mykey /dev/evfs/vg01/lvol5backup (evfsvol prompts for
a passphrase if there is no stored passphrase.)
# fsck -F vxfs /dev/evfs/vg01/lvol5backup
# mkdir /opt/evfs/backup_source
# mount -F vxfs /dev/evfs/vg01/lvol5/backup /opt/evfs/backup_source
# cp -r /opt/evfs/backup_source /opt/foo/backup_target
# umount /opt/evfs/backup_source
# evfsvol disable -k mykey /dev/evfs/vg01/lvol5backup (evfsvol prompts for
a passphrase if there is no stored passphrase.)
# evfsadm unmap /dev/evfs/vg01/lvol5backup
# lvmerge /dev/vg01/lvol5backup /dev/vg01/lvol5
Backing Up EVFS Volumes 111