Deploying DNS with a DNSSEC-HSM signing policy - BlueCat Integrity - 9.5.0

Address Manager Administration Guide

Product name
BlueCat Integrity

Having already configured your DNSSEC-HSM policy for zone signing, you can now deploy DNS to the managed DNS Servers in Address Manager.

BlueCat strongly recommends performing a full deployment with DNSSEC-HSM. That is, you should select the Force Full DNS Deployment check box form the Confirm Server Deploy page of the Address Manager user interface. Do not perform a Quick Deployment with DNSSEC-HSM.

For complete details on deployment, including how to verify the syntax of your DNS configuration and DNS zone files prior to deployment, refer to Managing deployment.