Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

Step 2e: (Optional) Adding an entry to /etc/fstab
Optionally, add an entry to the /etc/fstab file for the encrypted volume. The system can use
this entry for the mount -a command (mount all file systems in the /etc/fstab file) or to
automatically mount the file system at system startup. For file systems on EVS volumes in the /etc/
fstab file that you want the system to mount at system startup, the key database must reside on
the local root file system (the system must be able access the keys early in the system startup
procedure).
The syntax for the entry is as follows:
evfs_volume_path mount_point file_sys_type [options]
where:
evfs_volume_path Specifies the absolute pathname for the EVS volume device file, such as
/dev/evfs/vg01/lvol5, /dev/evfs/vx/dsk/rootdg/vol05,
or /dev/evfs/dsk/c2t0d1.
mount_point The path for the mount point.
file_sys_type The file system type. This must be a file system type supported by the
underlying LVM, VxVM, or physical volume, such as hfs or vxfs.
options Options for the entry. For more information, see fstab(4).
Example
The administrator adds the following entry for the new file system in the /etc/fstab file:
/dev/evfs/vg01/lvol5 /opt/encrypted_data vxfs defaults 0 2
Step 3: Verifying the configuration
Use the following commands to verify your EVFS configuration:
• evfsadm stat -a
• evfsvol display evfs_volume_path
evfsadm stat -a
After you access data or mount a file system on an EVS volume that is correctly configured, the
output for the evfsadm stat -a command shows nonzero values for the number of blocks read
(bpr), written (bpw), decrypted (bpd), and encrypted (bpe). The output is similar to the following:
# evfadm stat -a
----- EVFS statistics -----
Total EVFS Volumes: 1
EVFS Subsystem Status: up
Active Encryption Threads: 2
---- EVFS Volume Name ----|--- State ---|---------------- Queues -------------|
orr owr odr oer
/dev/evfs/vg01/lvol5 enabled 0 0 0 0
---- EVFS Volume Name ----|--- State ---|-------------- Counters -------------|
bpr bpw bpd bpe
/dev/evfs/vg01/lvol5 enabled 2074 52441 362 52345
---- EVFS Volume Name ----|--- State ---|---------------- Rates --------------|
kbpsr kbpsw dkbps ekbps
/dev/evfs/vg01/lvol5 enabled 25 3 362 34
For descriptions of the output fields, see “Displaying I/O and encryption statistics (evfsadm stat)”
(page 149) .
evfsvol display evfs_volume_path
The evfsvol display evfs_volume_path command displays information about the EVS
volume, including the name of the underlying LVM, VxVM, or physical volume device file, and the
52 Configuring an EVS volume