[Opendnssec-user] no signconf/foo.xml

Yuri Schaeffer yuri at nlnetlabs.nl
Mon Jan 8 09:10:47 UTC 2018


> i believe the problem was soft-hsm backup was needed and i had not
> gotten to that check in my daily manual ritual.  why soft-hsm backup 
> is manual, is something i have yet to understand.

For OpenDNSSEC it is a policy thing. You can configure it to use any key
available or only allow keys that are explicitly marked as backed up by
the user.
How the HSM (SoftHSM or otherwise) manages/automates its backups is out
of scope for ODS.

//Yuri

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20180108/b5aadabc/attachment.bin>


More information about the Opendnssec-user mailing list