[Opendnssec-user] Some questions from a new ods user

[Rickard Bellgrim]

> You can have different SO and User PINs.
> You should specify the User PIN in conf.xml
> AFAIK the SO-pin isn't actively used by SoftHSM anyways.

All the operations in OpenDNSSEC are done by using the regular user in PKCS#11.

SoftHSM only need the Security Officer if you want to re-initialize
the token or change the user PIN. These operations cannot be performed
by OpenDNSSEC, but must be done by a PKCS#11 utility like the softhsm
command.

// Rickard