A Hardware Security Module (HSM) is a secure cryptographic processor that generates encrypted zone keys for secure DNS zone signing.
Address Manager and DNS/DHCP Server support HSMs through DNSSEC. An HSM extends and improves DNSSEC functionality by localizing key generation and primary zone signing on the HSM server instead of the BlueCat appliance/VM. BlueCat’s HSM implementation supports integration with Entrust nShield Connect® HSM appliances.
Note: Entrust appliances with nCSS version 11.70 are compatible with BlueCat Enterprise DNS.