[Opendnssec-user] Why do we need standby keys?

Roland van Rijswijk roland.vanrijswijk at surfnet.nl
Fri Jul 9 07:43:35 UTC 2010


Hi Antti,

Antti Ristimäki wrote:
> By the way, I guess there are not too many people who are able to
> purchase additional hardware HSMs from different vendors just in order
> to have standby key in different system. Maybe utilizing softHSM would
> be an alternative solution? In case of extreme emergency it would be
> better than nothing..

Indeed, SoftHSM could be a solution, or the poor-man's HSM of choice: a
smart card ;-) (they are also easily replicated for redundancy purposes)

Cheers,

Roland

-- 
-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl




More information about the Opendnssec-user mailing list