Encrypted Volume and File System v1.1 Administrator's Guide

Examples
This section contains preparation examples.
User Session
The following example lists the commands entered by the root user to create an encrypted
volume. These commands correspond to steps 4 through 5 in this chapter. The user skips “Step
1: Configuring an Alternate EVFS Pseudo-User”, “Step 2: (Optional) Configuring Alternate Key
Database Directories”, and “Step 3: (Optional) Modifying EVFS Global Parameters”, and uses
the default EVFS pseudo-user and global parameters. The user must still configure the autostart
feature and back up the configuration.
Step 4: Start the EVFS subsystem.
# evfsadm start
Step 5: Create a key pair for the root user. The key name will be rootkey1. evfspkey will
prompt you for a passphrase.
# evfspkey keygen -u root -k rootkey1
Optional – Create a key pair for the recovery user. evfspkey will prompt you for a passphrase
and save the private key in the current working directory with the file name evfs.priv. Store
this key off line.
# evfspkey keygen -c rsa-2048 -r
Examples 47