Utimaco Bind 9, Руководство по интеграции

Страница: 8 / 20

Integration Guide: Bind 9
cs_pkcs11_R2.cfg with an editor of your choice and find the device parameter of the CryptoServer sec-
tion. Change the value to one of these values in accordance to your CryptoServer hardware.
• IP address of your device (e.g.
192.168.0.42
)
This device specifier is used for network attached devices. Further details to setup the ip ad-
dress of your device can be found in CryptoServer LAN Operating & Installation Manual.
•
/dev/cs2
This device specifier addresses a local installed PCI or PCIe device. An installed device driver is
necessary to open a connection. Further details to setup the driver can be found in CryptoServer
PCI(e) Operating & Installation Manual.
For debugging purposes change the parameter Logging from value 0 which means no logging to 15
respectively 5 for PKCS#11 R2 to provide full logging details.
4.2 Test PKCS#11 Environment
The p11tool respectively p11tool2 is an administration command line tool to manage PKCS#11 and
PKCS#11 R2 related issues for the CryptoServer. Check if your PKCS#11 environment has been
configured and installed correctly by performing ListSlots command of p11tool respectively p11tool2 .
The output should display a listing of available PKCS#11 slot numbers.
0: 00000000
1: 00000001
2: 00000002
3: 00000003
4: 00000004
Listing 1:
ListSlots
Initialize a PKCS#11 slot to store the necessary cryptographic keys used for DNSSEC later in this
document.
PKCS#11
# p11tool slot=0 InitToken=123456
# p11tool slot=0 LoginSO=123456 InitPin=utimaco123
PKCS#11 R2
Page 8