Utimaco Bind 9, Integration Manual

Page: 7 / 20

4 Procedures
The steps to integrate the CryptoServer in BIND with Linux or Microsoft Windows are a little different.
In places where the description of the integration steps may differ, the individual steps are explained
in separate chapters.
To integrate the CryptoServer with BIND domain name server ( named ) in context of DNSSEC secured
environment you need follow these steps:
1. Configure PKCS#11 environment
2. Test PKCS#11 environment
3. Patch and Build OpenSSL
4. Install BIND Domain Name Server
5. Generate Keys and Sign a Zone
4.1 Configure PKCS#11 Environment
The location of library and configuration file differs on Linux and Microsoft Windows operating system.
Therefore the procedures to setup the PKCS#11 respectively PKCS#11 R2 environment is described
separately.
4.1.1 Linux
The PKCS#11 library and configuration files for Linux operating system have to be installed manually.
For further installations steps it is referred to QuickStart Guide PKCS#11 [ ? ].
4.1.2 Microsoft Windows
With the installation of the CryptoServer software the necessary libraries, tools and configuration file
cs2_pkcs11.ini have been installed on your Microsoft Windows system. An environment variable has
been also set up and is refering to the configuration file.
4.1.3 Adjust Configuration File
The CryptoServer device specifier to address the CryptoServer device has to be adjusted in your con-
figuration file to use the PKCS#11 (R2) library. Open the configuration cs2_pkcs11.ini respectively
Page 7