Breadcrumbs

Introduction

This guide is part of the information and support provided by Utimaco. Additional documents produced to support your Utimaco SecurityServer product can be found in the document directory of the Utimaco SecurityServer product bundle. All Utimaco SecurityServer product documentation are available on Utimaco’s website at https://utimaco.com/.

About This Guide

This guide provides an integration explaining how to integrate an Utimaco CryptoServer Hardware Security Module (HSM) with OpenDNSSEC. Utimaco HSM is used to secure the private keys for Key Signing Key (KSK) and Zone Signing Key (ZSK) and offload signing operations on the HSM.

Target Audience for This Guide

This guide is intended for administrators of OpenDNSSEC and of Utimaco HSMs.

Document Conventions

The following conventions are used in this guide:

Convention

Use

Example

Bold

Items of the Graphical User Interface (GUI), e.g., menu options

Select Details and click on Properties button

Monospaced

Code that is given for explanation or as an example, file paths

certreq.exe -new request.inf IISCertRequest.csr

Italic

References and important terms

Operating system listed in Tested Versions

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message marks the result expected after the successful execution of an instruction.

Abbreviations

The following abbreviations are used in this guide:

Abbreviation

Meaning

CD

Compact Disc

CSADM

CryptoServer Command-line Administration Tool

DNS

Domain Name System

DNSSEC

Domain Name System Security Extension

DSA

Digital Signature Algorithm

GOST

Gosudarstvennyi Standard or Government Standard

GUI

Graphical User Interface

HSM

Hardware Security Module

IP

Internet Protocol

KASP

Key and Signing Policies

KSK

Key-Signing Keys

LAN

Local Area Network

MBK

Master Backup Key

PCIe

PCI Express Interface

PIN

Personal Identification Number

PKCS#11

Public-Key Cryptography Standard #11

RSA

Rivest-Shamir-Adleman

SO

Security Officer

URL

Uniform Resource Locator

ZSK

Zone-Signing Keys

List of abbreviations