Setting “Store passwords using reversible encryption” to disabled

There are two ways to encrypt an LVM volume:

1. You create an encrypted partition, create the PV inside it and then the whole PV is encrypted
2. You create a normal LVM, create LV inside it and then create an encrypted partition inside the LV.

If you use method 1 your root partition is encrypted. You might have gotten an emergency shell.

If you use method 2 you might want to leave the root unencrypted to simplify recovery if something goes wrong. Normally the root partition should hold system file, not private files.

I saw the comment that said this issue was closed for you, but I felt compelled to reach out to another Solaris user.

The encrypt and decrypt commands are provided by the SUNWcsu package, not the SUNWcrypt package.

The -K option comes in Solaris 11.

Another option for you might be to roll your own solution, if you can write code. here's an example:

http://blogs.oracle.com/sprack/entry/using_solaris_softtoken_keystore

Or use another solution as well, based on an encrypted ZFS filesystem to protect either the keystore or the data, or both. here's an example of that:

http://www.c0t0d0s0.org/archives/7055-Protecting-your-data-with-two-factors-and-ZFS-dataset-encryption.html

If you stored the encrypt/decrypt key (-k key, not -K keystore) on an encrypted filesystem, your application stack could use the current encrypt/decrypt binaries to do your work.

Or, just roll out Solaris 11, which drops GA next week. :)