Encrypted Volume and File System v1.1 Administrator's Guide

3. Use the evfsvol disable command to disable EVFS operation for the volume as follows:
• To disable a single EVFS volume without a stored passphrase:
evfsvol disable [-k keyname] evfs_volume_path
You must be the volume owner or an authorized user for the volume to execute this
command.
• To disable a single EVFS volume with a stored passphrase and an entry in the
/etc/evfs/evfstab file:
evfsvol disable -p evfs_volume_path
• To disable EVFS encryption and decryption for all volumes in the /etc/evfs/evfstab
file that include a key ID field:
evfsvol disable -a
where:
-a Causes EVFS to disable encryption and decryption for all volumes
in the file /etc/evfs/evfstab.
-p Causes EVFS to use a stored passphrase to disable encryption and
decryption for the specified EVFS volume. The
/etc/evfs/evfstab file must contain an entry for this volume
with a key ID field.
-k keyname Specifies the key name. If you do not specify -k keyname,
evfspkey uses the user name as the key name.
Valid value: An ASCII string, 1 - 255 characters long.
evfs_volume_path Specifies the absolute pathname for the EVFS volume device file,
such as /dev/evfs/vg01/lvol5,
/dev/evfs/vx/dsk/rootdg/vol05, or
/dev/evfs/dsk/c2t0d1.
Stopping the EVFS Subsystem
The evfsadm stop command stops the EVFS subsystem and terminates all kernel EVFS threads.
Use the following procedure to stop the EVFS subsystem:
1. For data consistency, stop all applications accessing the data. You can use the fuser -cu
command to determine the processes accessing files, and the fuser -cku command to
terminate the processes. See the fuser(1M) manpage for more information.
If the data is used by system processes, you might need to terminate the processes by
changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M)
for more information.
2. If you have a file system mounted on the EVFS volume, use the umount command to
unmount the file system. See the umount(1M) manpage for more information.
3. Disable all the EVFS volumes using the evfsvol disable command, as described in
“Disabling Encryption/Decryption Access to EVFS Volumes” (page 81). You must be the
volume owner or an authorized user for the volume to disable the volume.
4. Enter the following evfsadm stop command:
evfsadm stop
82 Administering EVFS