Encrypted Volume and File System v1.1 Administrator's Guide

Creating Cleartext Backup Media (VxVM Mirrored Volumes)
If you have mirrored VxVM volumes, you can create cleartext backup media using the procedure
described in “Creating Encrypted Backup Media on a Second EVFS Volume Using a Block Device
Utility (VxVM Mirrored Volumes)” (page 115) or “Creating Encrypted Backup Media on a Second
EVFS Volume Using a File Utility (VxVM Mirrored Volumes)” (page 117). However, instead of
using a second EVFS volume as the target for the backup utility, use a non-EVFS device as the
target. In both cases, the source EVFS volume is enabled when you execute the backup utility,
so the backup utility receives the data in cleartext.
Example: Block Device Utility
In the following example, the volume vol05 in disk group testdg has two plexes, vol05–01
and vol05–02. The administrator dissociates plex vol05–02 to use as the source for the backup
and mounts the file system on the temporary mount point /opt/evfs/backup_source. The
tape device /dev/rmt/0m is the target. The dd command receives cleartext from the source
EVFS volume.
# vxplex -g testdg dis -v vol05 vol05-02
# vxmake -g testdg -U gen vol backupvol plex=vol05-02
# vxvol -g testdg start backupvol
# evfsvol map /dev/vx/dsk/testdg/backupvol
# evfsvol check -r /dev/evfs/vx/dsk/testdg/backupvol
# evfsvol enable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol
prompts for a passphrase if there is no stored passphrase)
# dd bs=64k if=/dev/evfs/vx/dsk/testdg/backupvol of=/dev/rmt/0m
# evfsvol disable -k mykey /dev/evfs/vx/dsk/testdg/backupvol
# evfsadm unmap /dev/evfs/vx/dsk/testdg/backupvol
# vxvol -g testdg stop backupvol
# vxplex -g testdg -v backupvol dis vol05-02
# vxplex -g testdg -v vol05 att vol05-02
# vxassist -g testdg remove volume backupvol
Example: File Utility
In the following example, the volume vol05 in disk group testdg has two plexes, vol05–01
and vol05–02. The administrator dissociates plex vol05–02 to use as the source for the backup
and mounts the file system on the temporary mount point /opt/evfs/backup_source. The
directory /opt/evfs/backup_target is a non-encrypted file system. The cp command
receives cleartext from the source EVFS volume.
# vxplex -g testdg dis -v vol05 vol05-02
# vxmake -g testdg -U gen vol backupvol plex=vol05-02
# vxvol -g testdg start backupvol
# evfsvol map /dev/vx/dsk/testdg/backupvol
# evfsvol check -r /dev/evfs/vx/dsk/testdg/backupvol
# evfsvol enable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol
prompts for a passphrase if there is no stored passphrase)
# fsck -F vxfs /dev/evfs/vx/rdsk/testdg/backupvol
# mount -f vxfs /dev/evfs/vx/dsk/testdg/backupvol /opt/evfs/backup_source
# cp -r /opt/evfs/backup_source /opt/backup_target
# umount /opt/evfs/backup_source
# evfsvol disable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol prompts
for a passphrase if there is no stored passphrase)
# evfsadm unmap /dev/evfs/vx/dsk/testdg/backupvol
# vxvol -g testdg stop backupvol
# vxplex -g testdg -v backupvol dis vol05-02
# vxplex -g testdg -v vol05 att vol05-02
# vxassist -g testdg remove volume backupvol
120 Backing Up and Restoring Data on EVFS Volumes