[Opendnssec-user] Why do we need standby keys?
Roland van Rijswijk
roland.vanrijswijk at surfnet.nl
Fri Jul 9 07:43:35 UTC 2010
Hi Antti,
Antti Ristimäki wrote:
> By the way, I guess there are not too many people who are able to
> purchase additional hardware HSMs from different vendors just in order
> to have standby key in different system. Maybe utilizing softHSM would
> be an alternative solution? In case of extreme emergency it would be
> better than nothing..
Indeed, SoftHSM could be a solution, or the poor-man's HSM of choice: a
smart card ;-) (they are also easily replicated for redundancy purposes)
Cheers,
Roland
--
-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl
More information about the Opendnssec-user
mailing list