On Thu, May 12, 2016 at 7:54 PM, Roman Serbski <[email protected]> wrote:
> Do I need to follow 'softhsm --init-token ...' procedure (I noticed > that there is --module <path> directive)? Or OpenDNSSEC has to be > recompiled with libCryptoki2_64.so support? > No, everything should work out of the box with OpenDNSSEC. You initialize the PKCS#11 token when you create the partition, the users and the HA slots in the SafeNet HSM. The SoftHSM utils are primarily for SoftHSM, but there is an option, as you say, to use another PKCS#11 provider. However, the initialization process of an HSM is a bit more complicated then just using the PKCS#11 interface. // Rickard
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
