Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

3. Use the evfsvol disable command to disable EVFS operation for the volume as follows:
• To disable a single EVS volume without a stored passphrase:
evfsvol disable [-k keyname] evfs_volume_path
You must be the volume owner or an authorized user for the volume to execute this
command.
• To disable a single EVS volume with a stored passphrase and an entry in the /etc/
evfs/evfstab file:
evfsvol disable -p evfs_volume_path
• To disable EVFS encryption and decryption for all volumes in the /etc/evfs/evfstab
file that include a key ID field:
evfsvol disable -a
where:
-a Causes EVFS to disable encryption and decryption for all volumes
in the file /etc/evfs/evfstab.
-p Causes EVFS to use a stored passphrase to disable encryption and
decryption for the specified EVS volume. The /etc/evfs/evfstab
file must contain an entry for this volume with a key ID field.
-k keyname Specifies the key name. If you do not specify -k keyname,
evfspkey uses the user name as the key name.
Valid value: An ASCII string, 1 - 255 characters long.
evfs_volume_path Specifies the absolute pathname for the EVS volume device file,
such as /dev/evfs/vg01/lvol5,
/dev/evfs/vx/dsk/rootdg/vol05, or /dev/evfs/dsk/
c2t0d1.
Stopping the EVFS subsystem
The evfsadm stop command stops the EVFS subsystem and terminates all kernel EVFS threads.
Use the following procedure to stop the EVFS subsystem:
1. For data consistency, stop all applications accessing the data. You can use the fuser -cu
command to determine the processes accessing files, and the fuser -cku command to
terminate the processes. For more information, see the fuser(1M) manpage.
If the data is used by system processes, you might need to terminate the processes by changing
the system runlevel to single-user level with the shutdown utility. For more information, see
shutdown(1M).
2. If you have a file system mounted on the EVS volume, use the umount command to unmount
the file system. For more information, see the umount(1M) manpage.
3. Disable all the EVS volumes using the evfsvol disable command, as described in
“Disabling encryption and decryption access to EVS volumes” (page 64). You must be the
volume owner or an authorized user for the volume to disable the volume.
4. Enter the following evfsadm stop command:
evfsadm stop
Opening raw access to EVS volumes
Use the following evfsvol raw command to open an EVS volume for raw access. When an EVS
volume is open for raw access, EVFS does not decrypt data read from the volume and does not
encrypt data written to the volume. Entities reading data from the EVS volume receive encrypted
Starting and stopping EVFS 65