---
title: "Hardware Security Modules That Work with BIND 9"
slug: "hardware-security-modules-that-work-with-bind-9"
description: "These Hardware Security Modules are known to work with BIND 9."
tags: ["security", "hsm"]
updated: 2019-09-24T06:51:41Z
published: 2019-09-24T06:51:41Z
canonical: "kb.isc.org/hardware-security-modules-that-work-with-bind-9"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.isc.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Hardware Security Modules That Work with BIND 9

BIND 9 is known to work with three HSMs:

1. The **AEP Keyper**, which has been tested with Debian Linux, Solaris x86, (and Windows Server 2003, now EOL)
2. The **Thales nShield**, tested with Debian Linux; and the **Sun SCA 6000** cryptographic acceleration board, tested with Solaris x86.
3. The **Utimaco HSM** - tested using their software HSM simulator.

In addition, BIND can be used with all current versions of **SoftHSM**, a software-based HSM simulator library produced by the OpenDNSSEC project.