Encrypted Volume and File System v1.1 Administrator's Guide

Restoring Backup Media
This section describes how to restore backup media, and describes the following procedures:
• “Restoring Encrypted Backup Media from a Non-EVFS Device to an EVFS Volume” (page 125)
• “Restoring Backup Data from an EVFS Volume to an EVFS Volume” (page 126)
Restoring Encrypted Backup Media from a Non-EVFS Device to an EVFS Volume
When restoring encrypted backup media created on a non-EVFS device (such as a tape device)
that contains an EVFS volume, the target volume to which you are restoring the data must meet
the following criteria:
• The target volume must be an EVFS volume. If you do not have an EVFS volume, use the
procedure described in “Step 1: Configuring an EVFS Volume” (page 51) to create an EVFS
volume.
• The EVFS volume must have EVFS disabled.
CAUTION: If you do not disable encryption and decryption on the target volume, EVFS
encrypts the encrypted data you restore (the data is encrypted twice).
To use this procedure, you must have the appropriate file permissions to access the EVFS volume
device file and meet at least one of the following criteria:
• You are the volume owner.
• You are an authorized user for the volume.
• A stored passphrase exists for one of the volume's user key pairs, and you know the key ID
for the key pair.
Use the following procedure to restore encrypted backup media:
1. If the user key pairs used with the source EVFS volume are not available on the system,
restore them. See“Restoring User Keys” (page 84) for information on restoring EVFS user
key pairs.
2. For data consistency, suspend or stop any applications accessing data on the target volume.
You can use the fuser -cu command to determine the processes accessing files, and the
fuser -cku command to terminate the processes.
If the data is used by system processes, you might need to terminate the processes by
changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M)
for more information.
3. If a file system exists on the target volume, use the umount command to unmount the file
system on the target volume. See umount(1M) for more information.
4. Use the following command to disable encryption and decryption access to the target volume:
evfsvol disable [-k keyname] evfs_volume_path
See “Disabling Encryption/Decryption Access to EVFS Volumes” (page 81) for more
information.
5. Use the following command to enable raw access to the target volume:
evfsvol raw evfs_volume_path
Restoring Backup Media 125