Hardware Security Modules That Work with BIND 9

BIND 9 is known to work with three HSMs:

1. The AEP Keyper, which has been tested with Debian Linux, Solaris x86, (and Windows Server 2003, now EOL)
2. The Thales nShield, tested with Debian Linux; and the Sun SCA 6000 cryptographic acceleration board, tested with Solaris x86.
3. The Utimaco HSM - tested using their software HSM simulator.

In addition, BIND can be used with all current versions of SoftHSM, a software-based HSM simulator library produced by the OpenDNSSEC project.