29 Lis
2025
29 Lis
'25
20:22
On 29 Nov 2025, at 17:47, Daniel Salzman
<daniel.salzman(a)nic.cz> wrote:
To be clear, if you use a PKCS #11 keystore, the zone backup doesn't and can't
back up the
stored private keys. It only backs up metadata stored in the KASP DB. Therefore, you must
also
synchronize contents of the HSM. In the case of SoftHSM, you just copy the tokens
directory.
Sorry for the misunderstanding, I incorrectly used softhsm to mean “not HSM”.
We *are* using the PEM keystore.
.einar