evfspkey.1 (2010 09)

e
evfspkey(1) evfspkey(1)
(EVFS Software Required)
NAME
evfspkey - manages EVFS public/private keys and passphrases
SYNOPSIS
evfspkey add -u user [-g group]
evfspkey delete [-u user] -g group
evfspkey delete [-u user | -r
][-p][-k keyname]
evfspkey export [-r recovkey_file |
-u user [-k keyname ]|-g group]
[
-F pkcs12 | -F pem]
-f filename
evfspkey grpchk [-f]{-a |[
-u user][-g group ]}
evfspkey import -g group [-F pkcs12 |
-F pem] -f filename
evfspkey import [-r | -p [
-u user]|-s [-u user]] [-k keyname][-m keywrap ]
[
-F pkcs12 | -F pem] -f
filename
evfspkey keygen [-n][-c
cipher ]{-g group | -f filename}
evfspkey keygen [-r |[-p
[-u user ]|-s [-u user ]] [-c cipher ][-k
keyname][-m
keywrap ]
evfspkey loadkey -r
evfspkey lookup -g group
evfspkey lookup [-u user | -r][-k keyname]
evfspkey passgen {-d | -e}[-k keyname]
evfspkey passgen [-r recovkey_file | -f [-u user][-k keyname]|
-p [-u user][-k keyname][-m keywrap ]|
-s [-u user][-k keyname][-m keywrap ]
DESCRIPTION
The
evfspkey command enables users to create and manage their public/private key pairs and
passphrases. See evfs (5) for more information on the keys.
Always use the
evfspkey command to modify key and passphrase files. Do not edit key and passphrase
files directly.
The
evfspkey command requires the optional HP-UX Encrypted Volume and File System (EVFS)
software.
Subcommands
evfspkey recognizes the following subcommands:
add Add the group access key into the user’s key record if the group is the primary group of
this user. As a result, the user will have permissions granted to the group to read/write
encrypted files.
Only the key manager can perform this operation.
delete Remove a public/private key pair and or passphrase from the EVFS key database. If both
user and group are specified, the group access key will be removed from the user’s key
record without removing the key pair.
This subcommand also removes any existing passhprase file for the specified key.
export Export a user or group key pair from EVFS key database to a file in either PKCS#12 for-
mat or PEM format. If the option -F is not specified, the PKCS#12 format will be
assumed.
The key manager can export a group key or a user key. A key owner can export his/her
own key.
grpchk Check if group access keys are in those users’ key records whose primary group is the one
under process. You may check all group keys with the -a option, or specify specific user
and groups, with the -u and -g options.
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1