Deploying DNS with a DNSSEC-HSM signing policy - BlueCat Address Manager - 9.1.0

Address Manager Administration Guide

prodname
BlueCat Address Manager
version_custom
9.1.0

Having already configured your DNSSEC-HSM policy for zone signing, you can now deploy DNS to the managed DNS Servers in Address Manager.

BlueCat strongly recommends performing a full deployment with DNSSEC-HSM. That is, you should select the Force Full DNS Deployment check box form the Confirm Server Deploy page of the Address Manager user interface. Do not perform a Quick Deployment with DNSSEC-HSM.

For complete details on deployment, including how to verify the syntax of your DNS configuration and DNS zone files prior to deployment, refer to Managing deployment.