Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

evfsvol cannot retrieve private key
Symptom
An evfsvol command fails, and evfsvol displays a message similar to the following:
# evfsvol disable /dev/evfs/vg01/lvol5
evfsvol: disable error: cannot retrieve private key "root.root", key loading failure
Description
The evfsvol utility cannot retrieve a user's private key to perform an operation on an EVFS
volume.
Solution
If you do not specify a key name using the -k keyname option, evfsvol uses the default key
name, which is the user's account name. In the previous output, the root user entered the evfsvol
command, so evfsvol searched for the private key owned by root with the key name root
(root.root). If you are using an alternate key name, use the -k keyname option to specify the
key name.
If you specified the correct key name, determine the directories used for the key database by
checking the priv_key and pass_key attribute statements in the /etc/evfs/evfs.conf file.
By default, EVFS stores the user key database in subdirectories below the /etc/evfs/pkey/
users directory. Verify that the attribute statement contains no line breaks. Verify the file
permissions, owner and group for the key database directories, as described in the section,
“Restoring user keys” (page 67).
evfsvol create fails, EVFS device file not found in evfstab file
Symptom
The evfsvol create command fails and evfsvol displays a message similar to the following:
# evfsvol create /dev/evfs/vg01/lvol5
evfsvol: create error: /dev/evfs/vg01/lvol5 not found in evfstab file
Description
The evfsvol create command fails if you do not have an entry for the EVFS volume in the
/etc/evfs/evfstab file.
Solution
Add an entry for the EVFS volume to the /etc/evfs/evfstab file. The syntax for each entry is
as follows:
v volume_path /dev/evfs/evfs_volume_path [user_name.key_name] [options]
For more information, see the evfstab(4) man page.
evfsvol create fails, valid EMD already exists
Symptom
The evfsvol create command fails and evfsvol displays a message similar to the following:
# evfsvol create /dev/evfs/vg01/lvol5
evfsvol: create error: a valid EMD already exists in "/dev/evfs/vg01/lvol5",
use the -f option to override it
Description
The evfsvol create command fails if an EMD already exists on the volume. This can occur if
you reuse an EVFS volume without destroying the previous EMD.
154 Troubleshooting EVFS