Administrator's Guide
Examples
This section contains preparation examples.
User Session
The following example lists the commands entered by the root user to create an encrypted
volume. These commands correspond to steps 4 through 5 in this chapter. The user skips “Step
1: Configuring an Alternate EVFS Pseudo-User”, “Step 2: (Optional) Configuring Alternate Key
Database Directories”, and “Step 3: (Optional) Modifying EVFS Global Parameters”, and uses
the default EVFS pseudo-user and global parameters. The user must still configure the autostart
feature and back up the configuration.
Step 4: Start the EVFS subsystem.
# evfsadm start
Step 5: Create a key pair for the root user. The key name will be rootkey1. evfspkey will
prompt you for a passphrase.
# evfspkey keygen -u root -k rootkey1
Optional – Create a key pair for the recovery user. evfspkey will prompt you for a passphrase
and save the private key in the current working directory with the file name evfs.priv. Store
this key off line.
# evfspkey keygen -c rsa-2048 -r
Examples 47