Encrypted Volume and File System v2.2 Administrator Guide (777846-001, April 2014)

# mount -f vxfs /dev/evfs/vx/dsk/testdg/backupvol /opt/evfs/backup_source
# evfsvol display /dev/evfs/vx/dsk/testdg/vol06 (the target volume must be enabled)
# cp -r /opt/evfs/backup_source /opt/evfs/backup_target
# umount /opt/evfs/backup_source
# evfsvol disable -k mykey /dev/evfs/vx/dsk/testdg/backupvol
# evfsadm unmap /dev/evfs/vx/dsk/testdg/backupvol
# vxvol -g testdg stop backupvol
# vxplex -g testdg -v backupvol dis vol05-02
# vxplex -g testdg -v vol05 att vol05-02
# vxassist -g testdg remove volume backupvol
Creating cleartext backup media (VxVM mirrored volumes)
If you have mirrored VxVM volumes, you can create cleartext backup media using the procedure
described in “Creating encrypted backup media on a second EVS volume using a block device
utility (VxVM mirrored volumes)” (page 89) or “Creating encrypted backup media on a second
EVS volume using a file utility (VxVM mirrored volumes)” (page 91). However, instead of using a
second EVS volume as the target for the backup utility, use a non-EVFS device as the target. In
both cases, the source EVS volume is enabled when you execute the backup utility, so the backup
utility receives the data in cleartext.
Example: Block device utility
In the following example, the volume vol05 in disk group testdg has two plexes, vol05–01
and vol05–02. The administrator dissociates plex vol05–02 to use as the source for the backup
and mounts the file system on the temporary mount point /opt/evfs/backup_source. The
tape device /dev/rmt/0m is the target. The dd command receives cleartext from the source EVS
volume.
# vxplex -g testdg dis -v vol05 vol05-02
# vxmake -g testdg -U gen vol backupvol plex=vol05-02
# vxvol -g testdg start backupvol
# evfsvol map /dev/vx/dsk/testdg/backupvol
# evfsvol check -r /dev/evfs/vx/dsk/testdg/backupvol
# evfsvol enable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol
prompts for a passphrase if there is no stored passphrase)
# dd bs=64k if=/dev/evfs/vx/dsk/testdg/backupvol of=/dev/rmt/0m
# evfsvol disable -k mykey /dev/evfs/vx/dsk/testdg/backupvol
# evfsadm unmap /dev/evfs/vx/dsk/testdg/backupvol
# vxvol -g testdg stop backupvol
# vxplex -g testdg -v backupvol dis vol05-02
# vxplex -g testdg -v vol05 att vol05-02
# vxassist -g testdg remove volume backupvol
Example: File utility
In the following example, the volume vol05 in disk group testdg has two plexes, vol05–01
and vol05–02. The administrator dissociates plex vol05–02 to use as the source for the backup
and mounts the file system on the temporary mount point /opt/evfs/backup_source. The
directory /opt/evfs/backup_target is a non-encrypted file system. The cp command receives
cleartext from the source EVS volume.
# vxplex -g testdg dis -v vol05 vol05-02
# vxmake -g testdg -U gen vol backupvol plex=vol05-02
# vxvol -g testdg start backupvol
# evfsvol map /dev/vx/dsk/testdg/backupvol
# evfsvol check -r /dev/evfs/vx/dsk/testdg/backupvol
# evfsvol enable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol
prompts for a passphrase if there is no stored passphrase)
# fsck -F vxfs /dev/evfs/vx/rdsk/testdg/backupvol
# mount -f vxfs /dev/evfs/vx/dsk/testdg/backupvol /opt/evfs/backup_source
# cp -r /opt/evfs/backup_source /opt/backup_target
# umount /opt/evfs/backup_source
# evfsvol disable -k mykey /dev/evfs/vx/dsk/testdg/backupvol (evfsvol prompts
for a passphrase if there is no stored passphrase)
# evfsadm unmap /dev/evfs/vx/dsk/testdg/backupvol
Backing up EVS volumes 93