Hi!

I want to use OpenDNSSEC for ~15 Zones. Each zone will use their own keys (no key sharing) and the same policy for the beginning, but it should be possible to change the policy for a certain zone later. Thus I think it would be smart to start with 15 policies, although they all look the same.

I wonder what is the best setup for the SoftHSM. Shall I use a single slot/token for all keys, or should I have a dedicated slot per policy/zone?

Thanks
Klaus
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to