[Opendnssec-user] About Key rollover

Jakob Schlyter jakob at kirei.se
Tue Nov 17 08:58:59 UTC 2015


> On 17 nov. 2015, at 05:13, yaohongyuan <yaohongyuan at 163.com> wrote:
> 
>       Do you think it is possible for opendnssec to connect to two HSMs and sign into one zone file?

Yes, you can configure multiple repositories. If you update the KASP so that new keys to use the new HSM, it will automatically be used when rolling over.

	jakob




More information about the Opendnssec-user mailing list