Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

/etc/evfs/evfstab must include the key ID and the noauto flag. EVFS uses the key ID to
enable the volumes without manual intervention when the package fails over. The noauto flag
stops EVFS from enabling the volumes at system startup.
Use the following syntax for the entries in the /etc/evfs/evfstab file:
v volume_path evfs_volume_path user_name.key_name noauto
where:
v Indicates that the entry is for an EVFS volume.
volume_path Specifies the path for the underlying LVM, VxVM, or physical device
file, such as /dev/vg01/lvol5, /dev/vx/dsk/rootdg/vol05,
or /dev/dsk/c2t0d1.
evfs_volume_path Specifies the absolute pathname for the EVFS volume device file,
such as /dev/evfs/vg01/lvol5,
/dev/evfs/vx/dsk/rootdg/vol05, or /dev/evfs/dsk/
c2t0d1.
user_name.key_name Specifies the user name and key name pair to use when enabling
the volume.
You must also have a stored passphrase for the private key. For more
information, see “Creating keys for EVS volume owners” (page 42).
noauto Causes EVFS to not automatically enable this volume at system
startup. EVFS will enable this volume when the command evfsvol
enable -p is executed within the EVFS HA package control script.
Step 3d: Preparing EVFS volumes for adoptive nodes
Use the following procedure to prepare the EVFS volumes so you can configure them on the adoptive
nodes:
i. Use the following command to disable encryption and decryption access to the target volume:
evfsvol disable [-k keyname] evfs_volume_path
For more information, see “Disabling encryption and decryption access to EVS volumes”
(page 64).
ii. If you are using EVFS volumes created on LVM volumes, use the following vgchange command
to deactivate the LVM volume group on the configuration node:
# vgchange -a n lvolgroup_device_file
For example:
# vgchange -a n /dev/vg02
If you are using EVFS volumes created on VxVM volumes, use the following vxdg command
to deport the VxVM disk group on the configuration node:
# vxdg deport vxvm_group
For example:
# vxdg deport evfsdg
Step 3 (EFS only): Configuring EFS on the configuration node
On the configuration node, configure and verify EVFS using the procedures described in Chapter 4
(page 28). After you have verified EVFS operation, you must prepare EFS volumes for adoptive
nodes.Use the following procedure to prepare the EVFS volumes so you can configure them on
the adoptive nodes:
• If you are using EVFS volumes created on LVM volumes, use the following vgchange command
to deactivate the LVM volume group on the configuration node:
# vgchange -a n lvolgroup_device_file
For example:
172 Using EVFS with HP Serviceguard