Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

mapped, access to both the underlying volume path (/dev/disk) and the EVFS volume path
(/dev/evfs/disk) is shared. HP recommends that you use the EVFS volume path (for example,
/dev/evfs/disk).
Creating a file system
NOTE: Skip this step if you already have an existing file system.
To create a file system, enter the same command as you would to create a normal file system on
an LVM, VxVM, or on a physical volume:
# newfs –F FSTYPE volume_path
The parameters are as follows:
FSTYPE The file system type: HFS or VxFS.
volume_path The absolute path for the LVM, VxVM, physical, or EVFS character device path.
For example, /dev/vg01/rlvol1, /dev/vx/rdsk/testdg/vol1,
/dev/rdsk/c2d0d0, or /dev/evfs/vg/lvol1.
Performing operations on an EFS file system
On EFS file system, you can perform all the operations that you perform on a regular HFS or VxFS
file system, as follows:
Mounting an encrypted file system
Use the mount command with the -o stackfs option to mount an encrypted file system:
# mount -F FSTYPE -o stackfs=sefs evfs_volume_path mount_dir
You must specify the EFS volume instead of the regular physical volume. The parameters are as
follows:
FSTYPE File system type; it can be HFS or VxFS.
stackfs=sefs Stackable encrypted file system.
evfs_volume_path Mapped LVM, VxVM, or physical EVFS volume path. For example,
/dev/evfs/vg01/lvol1, /dev/evfs/vx/dsk/testdg/lvol1,
or /dev/evfs/dsk/c2d0d0.
Unmounting an encrypted file system
Use the umount command to unmount the mounted encrypted file system:
# umount mounted_directory | mounted_evfs_volume_path
You must invoke this command on a mounted EVFS volume path or from the mount directory where
the file system is mounted.
Other operations on encrypted file systems
You can use all other regular file system commands as well as the encrypted file systems commands.
Some of these commands are as follow:
• The extendfs command to change the size of file system.
• The fsadm command to administer the file system.
• The fsck command to verify the integrity of the file system.
• The newfs, newfs_hfs, and newfs_vxfs wrapper commands on top of the file system.
This example shows how to create and mount an encrypted file system on the /dev/vg01/lvol1
volume:
1. Map the LVM volume to an EVFS volume for file level encryption:
# evfsadm map -f /dev/vg01/lvol1
106 Creating an EFS volume and file system