Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

8. Verify the installation using the following swverifycommand:
#swverify EVFS
If EVFS is installed correctly on the system, the swverify command includes the following
text in the data it reports:
* Verification succeeded
9. On IA, delete the user keys. For more information on deleting a user key, see “Deleting a user
key” (page 138).
10. Check the value of emd_digest in the EVFS configuration file /etc/evfs/evfs.conf. If
the value is SHA1, replace this with SHA2.
11. Start the EVFS subsystem. For more information on starting the EVFS subsystem, see “Step 5:
Starting the EVFS subsystem” (page 33).
12. On IA, import all user keys. For more information on importing a user key, see “Importing a
user key” (page 137).
Uninstalling EVFS
CAUTION: Do not swremove EVFS if there is still encrypted data on the system. Otherwise data
will be lost once EVFS is removed.
To uninstall EVFS, follow these steps:
1. Stop all commands and applications accessing the encrypted data.
2. Backup all data, especially the /etc/evfs directory and all encrypted volumes and files.
3. Convert all encrypted data to cleartext. For EVS, copy the encrypted volume to a non-encrypted
volume. For EFS, copy the encrypted files to a non-encrypted file system.
4. Ensure that the /dev/evfs devices are not being used or referenced (for example, by
crontab and startup scripts).
5. Ensure that there is no EVFS filesystem in the /etc/fstab file.
6. Save all keys in case any backup encrypted data needs to be retrieved.
7. Stop EVFS subsystem and uninstall EVFS.
Uninstalling EVFS 27