About This Guide | Utimaco Integration Guides

This guide is part of the information and support provided by Utimaco. Additional documentation produced to support your Utimaco SecurityServer product can be found in the document directory of the Utimaco SecurityServer product bundle.

All Utimaco SecurityServer product documentation is available from Utimaco’s website at https://utimaco.com/.

This guide provides an integration guide explaining how to integrate Utimaco SecurityServer Hardware Security Module (HSM) with Bind9. Utimaco HSM securely generates and stores the KSK and ZSK keys required by Bind9 to sign the zone files.

Target Audience

This guide is intended for administrators of Bind9 and of Utimaco HSMs.

Document Conventions

The following conventions are used in this guide:

Convention	Use	Example
Bold	Items of the Graphical User Interface (GUI), e.g., menu options	Select Details and click on Properties button
`Monospaced`	Code that is given for explanation or as an example, file paths	`certreq.exe -new request.inf IISCertRequest.csr`
Italic	References and important terms	Operating system listed in Tested Versions

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message marks the result expected after the successful execution of an instruction.

Abbreviations

Abbreviation	Meaning
BIND	Berkeley Internet Name Domain
CSADM	CryptoServer Command-line Administration Tool
DNS	Domain Name System
DNSSEC	Domain Name System Security Extensions
DS	Delegation Signer
ECC	Elliptic Curve Cryptography
GUI	Graphical User Interface
HSM	Hardware Security Module
IP	Internet Protocol
KSK	Key-signing Key
LAN	Local Area Network
PCI-e	PCI Express Interface
PIN	Personal Identification number
PKCS#11	Public-Key Cryptography Standard #11
RHEL	Red Hat Enterprise Linux
RSA	Rivest-Shamir-Adleman
SO	Security Officer
URL	Uniform Resource Locator
ZSK	Zone-signing Key
URI	Uniform Resource Identifier
TTL	Time to Live
PKI	Public Key Infrastructure

List of abbreviations