[Opendnssec-user] SoftHSM Setup Question

Klaus Darilion klaus.mailinglists at pernau.at
Fri Jun 21 13:21:20 CEST 2013


Hi!

I want to use OpenDNSSEC for ~15 Zones. Each zone will use their own 
keys (no key sharing) and the same policy for the beginning, but it 
should be possible to change the policy for a certain zone later. Thus I 
think it would be smart to start with 15 policies, although they all 
look the same.

I wonder what is the best setup for the SoftHSM. Shall I use a single 
slot/token for all keys, or should I have a dedicated slot per policy/zone?

Thanks
Klaus



More information about the Opendnssec-user mailing list