Setting Up Utimaco CryptoServer Library in OpenDNSSEC Configuration File

Open the OpenDNSSEC configuration file /etc/opendnssec/conf.xml and edit the details in <RepositoryList> …… </Repository> as below.

›_ Console
`<?xml version="1.0" encoding="UTF-8"?> <Configuration> <RepositoryList> <Repository name="utimaco"> <Module>/opt/utimaco/lib/libcs_pkcs11_R3.so</Module> <TokenLabel>odnssec</TokenLabel> <PIN>1234</PIN> <SkipPublicKey/> </Repository>`

›_ Console

<?xml version="1.0" encoding="UTF-8"?> 

<Configuration> 

        <RepositoryList> 

                <Repository name="utimaco"> 

 

<Module>/opt/utimaco/lib/libcs_pkcs11_R3.so</Module> 

                        <TokenLabel>odnssec</TokenLabel> 
                        <PIN>1234</PIN> 

                        <SkipPublicKey/> 

          </Repository>

<Pin> …. </PIN> attribute is optional and can be commented as per requirement. IF the PIN is not set in the configuration file, user will need to enter the CryptoUser PIN every time.

<Repository name="utimaco"> an important attribute is the name of the local repository which is used in kasp.xml to identify storage of the keys. User can give repository name as per their requirement. Refer to the OpenDNSSEC Documentation for more details of theconf.xml file.

Run the command below to verify the connection with HSM.

›_ Console
`# ods-hsmutil info`

Console output of ods-hsmutil info