[Opendnssec-user] [E] Re: Not enough keys to satisfy zsk policy for zone

Marc Richer marc.richter at de.verizon.com
Thu Dec 21 17:20:26 UTC 2017


Hi,

> What value have you for AutomaticKeyGenerationPeriod in the conf.xml?

none. This is 1.4 and if I read the documentation correctly that option
was introduced in 2.0.

> also, did you set a key count limit on your HSM in the conf?

No, we have not set the Capacity option in the Repositiy section (which
I think is what you were referring to).

Regards
Marc



More information about the Opendnssec-user mailing list