Search Blog Tools • • & I’m successfully signing my own domain name with DNSSEC for months. At first I started with manual signing with the, then I tried the, and finally ended up with; just for playing around for trying different tools. Maybe in a future post I could write a comparison between them. Thanks to the integration of OpenDNSSEC with any PKCS-11 HSM, I tested with one I already had for digital certificates: an Aladdin USB eToken. My domain name (vulcano.cl) is served by an external server which I don’t have physical access (impossible to attach an HSM to it) and I don’t manage (no trust to leave the keys in the server). That said, I’m using a local machine (my own laptop, actually) to do the signing, and then transfering automatically the signed zone to the primary dns server every time there’s a resign. In my current setup I use a Fedora 13 Linux distribution, an Aladdin eToken PRO 64k with the driver 5.00.28 for CentOS 64 bits version, and OpenDNSSEC 1.1.2 compiled from source.

I use the HSM only for the KSKs (I’m not sure how many keys it can handle) and I have a SoftHSM repository for the ZSKs. The zone is uploaded to the primary nameserver via ssh using a post-signing script, a script is run after the signing process finishes.

Readers known about: Nr. Driver Name 0 openct Aladdin eToken PRO 64k 1 openct OpenCT reader (detached) 2 openct OpenCT reader (detached) 3 openct OpenCT reader (detached) 4 openct OpenCT reader (detached). Now we should be able to read the card, if there is only one token in the USB port. The eToken Pro 64k is capable of 2048 bit keys, but the 16k and 32k models are only capable of 1024 bit keys. PKI Client software can be used to configure your token and is purchased separately through Aladdin. Download and install the eToken Properties software. Due to licensing restrictions we cannot supply the eToken drivers and libraries on this site, these need to be downloaded from Aladdin. (the files on Aladdin's Russian site do not require a password to unpack them, the ones on the US site do.). Como instalar o seu eToken PRO 72K Aladdin 1º) Colocar o eToken na porta USB de seu computador; 2º) Verificar seu Windows; 3º) Baixar o Drive.

My server uses as DNS authoritative server software. The eToken was pretty straightforward to make it work, once I was able to obtain the right drivers. Adobe Photoshop Cs4 Free Download Full Version 32 Bit. Aladdin doesn’t have a download page, but you must obtain the drivers with the distributor who sold you the eToken. You should ask them for the last version. Sketchup 6 Download Gratis Italiano. As I stated before, the pkiclient-5.00.28-0.x86_64.rpm package worked perfect.