A Hardware Security Module (HSM) is a secure cryptographic processor that generates encrypted zone keys for secure DNS zone signing.
Address Manager and DNS/DHCP Server support HSMs through DNSSEC. An HSM extends and improves DNSSEC functionality by localizing key generation and primary zone signing on the HSM server instead of the BlueCat appliance/VM. BlueCat’s HSM implementation supports integration with Thales nShield Connect® HSM appliances.
Note: Thales appliances with nCSS version 11.70
are compatible with BlueCat Enterprise DNS.