Native pkcs#11 and auto-dnssec feature

Wed Apr 8 15:21:30 UTC 2015

> My question is about auto-dnssec feature that maintain zone by 
> internally signing RRs. How this feature will work without a PIN since 
> BIND needs access to private key when it needs to resign automatically 
> and i did't find a way to provide the PIN throught configuration files 
> ?

Hi,

Does the reference manual section about proving the PIN help?
http://ftp.isc.org/isc/bind9/9.10.2/doc/arm/Bv9ARM.ch04.html#id2639064