<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, Jun 9, 2014 at 7:27 PM, Randy Bush <span dir="ltr"><<a href="mailto:randy@psg.com" target="_blank">randy@psg.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class=""><div class="h5"><br>
</div></div>all ds are seen.  repository is flagged.  i am still not asked to back<br>
keys up.<br>
<br>
                <Repository name="SoftHSM"><br>
                        <Module>/usr/local/lib/softhsm/libsofthsm.so</Module><br>
                        <TokenLabel>opendnssec</TokenLabel><br>
                        <PIN>VibogNond1</PIN><br>
                        <RequireBackup/><br>
                        <SkipPublicKey/><br>
                </Repository><span class=""><font color="#888888"><br></font></span></blockquote><div><br></div><div>Are the keys generated after the update to the policy? Changes to the policy only applies to keys generated after the change.</div>
<div><br></div><div>Could it be that the message is not logged because the ZSK is generated in the same repository as the KSK? See the if-statement in:<br></div><div><a href="https://github.com/opendnssec/opendnssec/blob/1.4/master/enforcer/enforcerd/enforcer.c#L575">https://github.com/opendnssec/opendnssec/blob/1.4/master/enforcer/enforcerd/enforcer.c#L575</a><br>
</div><div><br></div><div>// Rickard</div></div><br></div></div>