Administrator's Guide

# strings /dev/vg01/lvol5 | grep "TOP SECRET"
(The strings command does not find the string "TOP SECRET")
# evfsvol close /dev/evfs/vg01/lvol5
# evfsvol enable /dev/evfs/vg01/lvol5
Enter user passphrase: (enter the passphrase)
# mount -F vxfs /dev/evfs/vg01/lvol5 /opt/encrypted_data
Step 4: (Optional) Migrating Existing Data to an EVFS Volume
Use the following procedure to migrate an existing directory of data to the EVFS volume:
a. For data consistency, stop all applications accessing the data. You can use the fuser -cu
command to determine the processes accessing files, and the fuser -cku command to
terminate the processes. See fuser(1M) for more information.
If the data is used by system processes, you might need to terminate the processes by
changing the system runlevel to single-user level with the shutdown utility. See shutdown(1M)
for more information.
b. (Optional) Create a backup of the existing data.
c. Use the cp command or other utility to copy the data from the existing files to an EVFS
volume.
d. (Optional) Remove the old files or directories. If you migrated all the data from a file system,
you can unmount the old file system. See umount(1M) for more information.
e. (Optional) If you unmounted a file system in the previous step, remove the entry for the file
system from the /etc/fstab file.
f. (Optional) Use the ln command to create a symbolic link from the old directory to the
appropriate directory on the encrypted volume. See ln(4) for more information.
g. Restart applications that use the data as needed.
Example
In the following example, the /opt/encrypted_data directory is located on an EVFS volume
has already been created and enabled.
# fuser -cu /opt/my_data
# fuser -cku /opt/my_data
# cp -R /opt/my_data/* /opt/encrypted_data
# rm -r /opt/mydata
(If /opt/mydata was a file system, you would unmount it instead and remove the corresponding
entry from the /etc/fstab file.)
# ln -s /opt/encrypted_data /opt/my_data
Option 1: Creating a New EVFS Volume 61